News Vulnerability Management and more
- №189 в категории «Технологии»
- №4 760 среди международных каналов
- №6 562 среди каналов на языке «английский»
- №7 431 в мире
Latest news about vulnerability assessment, IT compliance management, security automation and other beautiful stuff. It updates automatically from RSS feeds. Discussion group for this channel: @avleonovchat You can also watch my main channel @avleonovcom
- 24 часа
- −1
- 7 дней
- –
- 30 дней
- +53
- Реакции
- 0
- Репосты
- –
- Комментарии
- –
Динамика подписчиков
Подписчиков у канала «News Vulnerability Management and more»: 1 514. Прирост за последние 30 дней: 53 (3,6 %). Средний охват поста за сутки около 40, вовлечённость 2,6 %.
По дням, последние 30 дней
| Дата | Подписчики | Изменение | Посты | Ср. просмотры поста |
|---|---|---|---|---|
| 12 ноя | 1 514 | −1 | 11 | 37 |
| 11 ноя | 1 515 | +1 | 15 | 44 |
| 10 ноя | 1 514 | 0 | 35 | 35 |
| 9 ноя | 1 514 | +52 | 14 | 37 |
| 13 окт | 1 462 | – | 0 | – |
Просмотры по возрасту поста
Средние просмотры в каждом возрасте, посты за последние 30 дней.
- 1 ч
- 14
- 3 ч
- 28
- 6 ч
- 34
- 12 ч
- 35
- 24 ч
- 42
- 48 ч
- 47
- 3 дня
- 42
Когда публикует
Время по UTC. 95 постов за 90 дней.
Последние посты
-
🟠 PHP2Shell Exploitation on Check Point Gateway #CheckPointBlog "## Key findings * Beginning on 30 October 2026, an attacker executed scanning and exploitation activity against organizations with unpatched Check Point Security Gateways, using Mobile Access portals with PHP2Shell as initial access followed by CVE-2026-123039. * The first wave, on October 30, targeted Israeli organizations and included destructive activity against some of them. A broader second wave on November 2 targeted organizations across multiple countries and sectors, with no evidence of destructive activity * In the investigated intrusion, PHP2Shell provided initial access,..." https://research.checkpoint.com/2026...
17 просмотров -
🔵 Other News Digest #ComputerWeeklyNews 1. Bug-hunting time cut dramatically with AI, says Forescout 2. AI agents bring down wind farm within two hours #TheRegisterNews 1. European tech buyers add digital sovereignty to cyber shopping list #InfosecurityMagazineNews 1. NCSC Launches Cyber Adversary Testing to Boost Resilience 2. Lego Takes BrickLink Marketplace Offline After Detecting Unusual Activity #BleepingComputerNews 1. Microsoft: Recent Windows updates cause SQL Server performance issues 2. Microsoft confirms Windows security updates installation issues #TheHackersNews 1. Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them 2. Calendar Invites and Live...
21 просмотров -
🟡 Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs #TheRegisterNews "TOP STORIES AI - To thwart reverse engineering by agents, dev proposes blinding them A poke in the AI with a sharp stick - AMD winds up Zen 6 cores for faster clock speeds Chips boast up to 256 cores, clocks up to 5.3 GHz, and IPC gains of 20 to 31 percent, just not all on the same SKU - A closer look at Verano, AMD's first step toward a Zen-based superchip to rival Nvidia's Vera Rubin Cores, clocks, memory, and interconnects all perfectly balanced for a singular mission: keeping instinct fed. - Fireworks AI gets burned twice as customer data exposure widens Inference biz pins latest b...
23 просмотров -
🟡 New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access #TheHackersNews "Enable JavaScript and cookies to..." https://thehackernews.com/2026/11/new-n-central-exploits-work-against.html
31 просмотров -
🟢 PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution #TheHackersNews "Enable JavaScript and cookies to..." https://thehackernews.com/2026/11/ptc-patches-critical-windchill-and.html
34 просмотров -
🟢 Security Teams Must Shift from Patching to Mitigation in the AI Era #InfosecurityMagazineNews "Symantec’s Dick O’Brien says the rapid closure of the patch window means organizations must move beyond patching and adopt an assume exploit..." https://www.infosecurity-magazine.com/news/shift-patching-mitigation-ai-era/
45 просмотров -
🔴 Hackers plant GSocket on Linux servers for persistent access #BleepingComputerNews "Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access. Since March, detections of malicious GSocket activity have increased, particularly in attacks targeting web applications and hosting environments. GSocket allows attackers to reach systems behind firewalls or NAT by intercepting network connections and replacing the program's conventional IP-layer communication with its own transport layer, which routes traffic through the Global Socket Relay..." https://www....
46 просмотров -
🟢 Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover #TheHackersNews "Enable JavaScript and cookies to..." https://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.html
54 просмотров -
🔵 Other News Digest #InfosecurityMagazineNews 1. Suspected Chinese Malware Supplier Tied to Three Hacking Campaigns 2. Maersk Reveals Data Breach as Extortion Group Demands $5m #TheRegisterNews 1. Disgraced former CA eMudhra blames buggy script for hopelessly weak certificates 2. London hotel put admin login for booking website on whiteboard behind the front desk #TheHackersNews 1. ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients 2. Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely 3. Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data 4. Attacker Used 4,837 Hija...
44 просмотров -
🔴 PHP2Shell and Node2Shell: Find, Fix, and Verify Across Your Web Apps and APIs #QualysBlog "### Key Takeaways * Neither flaw is in your application code. Every app and API on a vulnerable runtime inherits the risk. * PHP2Shell (CVE-2026-109618, CVE-2026-109619) is fixed in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. * Node2Shell (CVE-2026-111497) is fixed in Node.js 22.23.4, 24.22.1, and 26.12.1. * Both are on the CISA KEV list. PHP2Shell was added October 26. Node2Shell followed on October 27. * Qualys TotalAppSec tests the application and the APIs with four non-intrusive QIDs for detection of vulnerabilities and two intrusive QIDs for verification of fix. * Patching fixes..." https:...
47 просмотров
-
#Vulristics #DailyExploits for 2026-11-08 based on #Vulners data 1. D4D0F8EA-D49F-5F05-AE62-467391EA2D3F - reverse-skill 2. PACKETSTORM:239794 - AJ-Report 1.7.1 Authentication Bypass / Remote Code Execution 3. PACKETSTORM:239795 - Arm Mali GPU Kernel Driver r39p0 Use-After-Free 4. PACKETSTORM:239802 - Telerik UI for ASP.NET AJAX 2026.2.708 DialogHandler Shell Upload 5. PACKETSTORM:239804 - Drupal Fasttoggle 4.1.0 Cross Site Request Forgery 6. PACKETSTORM:239808 - MacCMS v10 2026.1000.4053 Account Takeover 7. PACKETSTORM:239812 - OpenIdentityPlatform OpenAM 16.0.5 Pre-Authentication Remote Code Execution 8. PACKETSTORM:239814 - OpenVPN 2.7.8 Interactive Service Privilege Escalation 9. PACKET...
70 просмотров -
#Vulristics #DailyExploits for 2026-11-07 based on #Vulners data 1. 16E623B0-8243-50DE-9DBA-1295D423544F - open-reverselab 2. 1DAYEXPLOIT:CVE-2026-119977 - WordPress: RCE 3. 966D1074-BA2C-5EA2-B3B7-DC187FB7CDD4 - reverse-skill 4. KS:AUXILIARY-ADMIN-HTTP-REPETIER_CVE_2023_31059_FILE_READ - Repetier-Server Directory Traversal File Read (CVE-2023-31059) 5. KS:EXPLOITS-MULTI-HTTP-NCAST_CVE_2024_0305_RCE - Ncast busiFacade Command Injection RCE (CVE-2024-0305) 6. KS:SCANNER-HTTP-CVE_2025_64446_DETECT - Fortinet FortiWeb - Authentication Bypass Detection (CVE-2025-64446) 7. PACKETSTORM:239604 - Node.js 26.12.0 Brotli Decoder Out-Of-Bounds Write 8. PACKETSTORM:239605 - PHP 8.5.11 Stale Global Stat...
66 просмотров -
🔵 Other News Digest #BleepingComputerNews 1. Runaway AI hacking agent behind WorkOS breach after escaping sandbox 2. CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands 3. Hackers pull off $133 million French bank heist via service provider #TheRecordNews 1. Certificate authority DigiCert reports data breach involving business customer info 2. Medical services company settles with 4 states over 2023 hack of sensitive patient records #SecurityWeeklyVideo 1. AI hates us all, Binance, OpenSSH, Apple, WordPress, DNS, Scams, Josh Marpet and More - SWN #631 #TheRegisterNews 1. NHS breach helpline left staff carrying a 'significant emotional burden' 2. Agents reveal secrets when offer...
62 просмотров -
#Vulristics #DailyExploits for 2026-11-09 based on #Vulners data 1. 7A6C78B2-58FE-547B-B335-F40426B5C270 - mcp-server-delphi 2. A9CBEFDD-DC7B-5D35-B81C-B0A4265996B3 - airecon 3. KS:EXPLOITS-MULTI-HTTP-CRAFTCMS_CVE_2026_123488_SQLI - Craft CMS CVE-2026-123488 Element Search SQLi 4. KS:EXPLOITS-MULTI-HTTP-GS_JWT_CVE_2026_113615_SQLI - GS JWT CVE-2026-113615 SQLi Admin JWT 5. KS:EXPLOITS-MULTI-HTTP-MAGENTO_CVE_2026_48356_RCE - Magento WYSIWYG Upload RCE (CVE-2026-48356) 6. KS:SCANNER-HTTP-GS_JWT_CVE_2026_113615_DETECT - GS JWT CVE-2026-113615 Detect 7. KS:SCANNER-HTTP-MIKROTIK_ROUTEROS_CVE_2026_84411_DETECT - MikroTik RouterOS WebFig jsproxy Detect (CVE-2026-84411) 8. PACKETSTORM:239793 - OPNs...
61 просмотров -
🔴 SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks #BleepingComputerNews "SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. The vulnerability, tracked as CVE-2026-19868, allows attackers with valid credentials for an alternate authentication method to bypass SAML authentication controls, potentially including SAML-enforced multi-factor authentication (MFA). The flaw has a CVSS severity score of 7.1 and only affects SonicOS SSL-VPN services configured to use SAML authentication. In a security advisory published Friday, SonicWall warned that it had..." https://ww...
55 просмотров -
🔴 Google patches eighth Chrome zero-day exploited in attacks this year #BleepingComputerNews "Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year. "Google is aware that an exploit for CVE-2026-125350 exists in the wild," the company said in a Monday security advisory. As Google explained, this flaw stems from a Use-After-Free (UAF) weakness in the XML component of the Google Chrome web browser, which occurs when the browser's XML parser processes data, deletes an object from the computer's memory, but fails to clear the pointer referencing that object. Attackers can exploit..." h...
54 просмотров -
🟢 Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagging Servers on Failover #TheHackersNews "Enable JavaScript and cookies to..." https://thehackernews.com/2026/11/critical-pre-auth-mongodb-flaw-cve-2026.html
54 просмотров -
🔵 Other News Digest #BleepingComputerNews 1. Iris Ohyama data cloud breach exposes info of 7.7 million customers #TheHackersNews 1. U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses 2. CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation 3. Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room #InfosecurityMagazineNews 1. Anti-Money Laundering Watchdog FATF Targets Scam Compounds #TheGuardianNews 1. Hot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic? #TheRegisterNews 1. Huawei says it’s made a 100 percent Chinese PC 2. Linus Torvald...
53 просмотров -
🔵 Other News Digest #TheGuardianNews 1. The Guardian view on the British Library: don’t privatise the reading rooms | Editorial #TheHackersNews 1. CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws 2. Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data #TheRecordNews 1. France blames Iran for fridge cyberattacks, says some caused fires 2. Vanderbilt cybersecurity incident impacting campus devices and systems #BleepingComputerNews 1. Vanderbilt University hit in BYOD ransomware attack, data theft claimed 2. SEGA newsletter data breach exposes 2.2 million email addresses 3. York University breach exposed personal information...
52 просмотров -
🟡 Anthropic's super bug-finding Mythos model is going into Cisco and IBM products #TheRegisterNews "TOP STORIES AI - Microsoft's Azure Linux gets 470-plus security fixes in one almighty patching session A mountain of CVEs, a certificate cleanup, and yet more work for Microsoft's patching teams - PyTorch 2.15 tackles the 'one bad GPU' problem Technical debt shoveled aside to make large-scale AI training more resilient - Meta brings Conductor on board its model train Agent orchestration startup gets its exit - Bare metal boom: On-prem server sales for HPC and AI up 20% this year Firms still want kit on-premises, but spike in revenue is as much about increased costs as higher sales - Windows....
51 просмотров
Вопросы о канале «News Vulnerability Management and more»
Сколько подписчиков у канала «News Vulnerability Management and more»?
У канала «News Vulnerability Management and more» (@avleonovnews) 1 514 подписчиков на 12 ноября 2026 г.
Растёт ли канал «News Vulnerability Management and more»?
Да. Прирост за последние 30 дней: 53 (3,6 %).
Сколько человек видят пост в канале «News Vulnerability Management and more»?
Средний пост набирает около 40 просмотров за 24 часа, это примерно 3 % подписчиков (ERR).
О чём канал «News Vulnerability Management and more»?
Канал в категории «Технологии», язык постов: английский. Описание канала: «Latest news about vulnerability assessment, IT compliance management, security automation and other beautiful stuff. It updates automatically from RSS feeds. Discussion group for this channel: @avleon...»
Какое место занимает канал «News Vulnerability Management and more»?
По числу подписчиков: №189 в категории «Технологии», №4 760 среди международных каналов, №6 562 среди каналов на языке «английский», №7 431 в мире.
Публикует ли канал «News Vulnerability Management and more» рекламу?
За последние 30 дней ни один из 95 постов не помечен как реклама (#ad, Sponsored, «Реклама»). Рекламу без пометки определить нельзя.
Статистика обновлена 1 час назад.