/
loss_type:data × latest_source_host:securityaffairs.com × criticity:high × limpar

Resultados

4 casos · pág. 1/1

securityaffairs.com · · 4 fontes · 4 atualizações high

Signal RingRTC bug CVE-2026-113380 can leave call audio active after hangup

A vulnerability in Signal's open-source RingRTC calling library, tracked as CVE-2026-113380 (CVSS v4.0 9.3), can stop a call from terminating properly. This can leave audio, and possibly video, channels open after a user hangs up. MITRE published the CVE on October 20, 2026, classified as CWE-754, and NIST added it to the NVD on Tuesday (…

securityaffairs.com · · 3 fontes · 3 atualizações high

Pegasus zero-click spyware confirmed on Belgrade University rector's iPhone days before Serbia's election; prosecutor also targeted

Citizen Lab, working with the SHARE Foundation, confirmed with high confidence that the iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student-led anti-corruption protests, was infected with NSO Group's Pegasus in 2026 through a zero-click exploit (thehackernews.com, securityaffairs.com,…

securityaffairs.com · high

AfD hosting provider breached; hexane.cc publishes AI summaries of 421,179 allegedly stolen party emails

Germany's Alternative für Deutschland (AfD) confirmed on 19 October 2026 that a hosting provider used by the party was hacked in September and that mailboxes were copied. The anonymous site hexane.cc went online claiming to index 421,179 internal party emails. It does not publish the emails. It shows AI-generated summaries sorted into cat…

securityaffairs.com · high

Unpatched 16-year-old Broadcom Wi-Fi WPS flaw enables unauthenticated RCE on routers, affecting 1.5M+ gateways in Belgium

Researcher Quentin Kaiser presented at Hexacon a vulnerability in Broadcom's proprietary 802.11 implementation, present in its SDK since at least 2010, that gives an attacker within Wi-Fi range unauthenticated remote code execution on affected routers without the network key or WPS enrollment. An incomplete patch was silently released in …