GitHub added support for Sign in with Apple, allowing users to create accounts instantly and use a randomized relay email address for enhanced privacy protection.

Flowise patched a Critical (CVSS 10.0) RCE flaw (CVE-2025-61913) in WriteFileTool. Authenticated attackers can write arbitrary files to the filesystem to gain command execution.

CVE-2025-59397 - Open Web Analytics SQL Injection Full Disclosure mailing list archives From: Seralys Research Team via Fulldisclosure Date: Wed, 8 Oct 2025 12:19:56 +0000 Seralys Security Advisory | https://www.seral ... Read more Published Date: Oct 09, 2025 (1 hour, 55 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-59397

1Password launched Secure Agentic Autofill to prevent AI agents from accessing credentials. It uses Touch ID for approval, creating a secure, human-in-the-loop workflow for web automation.

IBM and Anthropic partnered to embed Claude AI into a new IDE for enterprise software development, with early internal testing reporting an average 45% developer productivity boost.

Posted by Douglas Bagnall on Oct 08 The Samba team (which includes me) has announced there will be a security release next Wednesday. This is our standard procedure, though this time we have added an estimate of how many people might be affected by each bug. Douglas -------- Forwarded Message -------- Subject: Heads-up: Upcoming Samba security releases Date: Thu, 9 Oct 2025 17:38:13 +1300 From: Douglas Bagnall via samba-technical <samba-technical () lists samba org>...

Deno patched a High-severity flaw (CVE-2025-61787) allowing Command Injection on Windows when spawning batch files. Attackers can execute arbitrary commands via malicious arguments.

CrowdStrike patched two flaws in Falcon Sensor for Windows (CVE-2025-42701). Attackers with local code execution can delete arbitrary files, risking system stability.

Discord says they will not be negotiating with threat actors who claim to have stolen the data of 5.5 million unique users from the company's Zendesk support system instance, including government IDs and partial payment information for some people.

Qilin ransomware claimed responsibility for the recent attack on the beer giant Asahi that disrupted operations in Japan.

A sophisticated new breed of ransomware attacks is leveraging legitimate database commands to compromise organizations worldwide, bypassing traditional security measures through “malware-less” operations. Unlike conventional ransomware that encrypts files using malicious binaries, threat actors are exploiting exposed database services by abusing standard database functionality to steal, wipe, and ransom critical data. The attack methodology represents […]

The California Consumer Privacy Act, signed in 2018, gave Californians the right to send opt-out signals, but major browsers have not had to make opt-outs simple to use.

Crimson Collective, which recently breached the GitLab instance of Red Hat Consulting, has teamed up with the notorious cybercriminal collective.