https://appsecscoop.com/c/cyber-attacks/global-firms-hit-by-750m-spam-messages-as-yam/AppSec Scoopen2026-10-16T12:39:50ZGlobal Firms Hit by 750M Spam Messages as YAM Store Phishing Hub Is Dismantledhttps://appsecscoop.com/c/vulnerabilities/apache-kylin-5-0-5-patches-default-startup/AppSec Scoopen2026-10-16T11:06:36ZApache Kylin 5.0.5 patches default startup profile security setting oversighthttps://appsecscoop.com/c/vulnerabilities/apache-answer-users-face-reaction-api/AppSec Scoopen2026-10-16T09:08:06ZApache Answer users face reaction API authorization bypass in versions up to 2.0.2https://appsecscoop.com/c/vulnerabilities/stolen-api-keys-fund-autonomous-scans-shifting/AppSec Scoopen2026-10-16T08:33:59ZStolen API keys fund autonomous scans, shifting costs to victimshttps://appsecscoop.com/c/cloud-security/australian-organisations-must-shift-from/AppSec Scoopen2026-10-16T07:34:10ZAustralian organisations must shift from Essential Eight to new ASD Essentials frameworkhttps://appsecscoop.com/c/vulnerabilities/unauthenticated-access-in-archon-ai-agent-exposes/AppSec Scoopen2026-10-16T06:45:28ZUnauthenticated Access in Archon AI Agent Exposes Host Command Executionhttps://appsecscoop.com/c/vulnerabilities/adobe-photoshop-patch-fixes-high-severity-remote/AppSec Scoopen2026-10-16T05:08:12ZAdobe Photoshop Patch Fixes High-Severity Remote Code Execution Flawhttps://appsecscoop.com/c/vulnerabilities/dataease-sql-injection-flaw-allows-database/AppSec Scoopen2026-10-16T04:16:35ZDataEase SQL injection flaw allows database compromise in versions before 2.10.26https://appsecscoop.com/c/vulnerabilities/gitingest-symlink-flaw-lets-attackers-read-server/AppSec Scoopen2026-10-16T03:42:49ZGitingest symlink flaw lets attackers read server fileshttps://appsecscoop.com/c/vulnerabilities/vs-code-extension-flaw-allows-remote-code/AppSec Scoopen2026-10-16T03:33:02ZVS Code Extension Flaw Allows Remote Code Execution Before 0.8.29https://appsecscoop.com/c/vulnerabilities/filerise-flaw-allows-silent-file-replacement/AppSec Scoopen2026-10-16T02:45:08ZFileRise flaw allows silent file replacement, patch now availablehttps://appsecscoop.com/c/vulnerabilities/unauthenticated-keystroke-injection-affects/AppSec Scoopen2026-10-16T02:21:03ZUnauthenticated keystroke injection affects FreeRDP shadow server versions prior to 3.32.0https://appsecscoop.com/c/vulnerabilities/woocommerce-email-customizer-patch-needed-for/AppSec Scoopen2026-10-16T00:04:48ZWooCommerce Email Customizer Patch Needed for High-Severity Remote Code Executionhttps://appsecscoop.com/c/vulnerabilities/eclipse-vert-x-mysql-client-flaw-causes-denial-of/AppSec Scoopen2026-10-15T23:12:29ZEclipse Vert.x MySQL client flaw causes denial of servicehttps://appsecscoop.com/c/vulnerabilities/suse-steve-tls-flaw-allows-mitm-attacks-in/AppSec Scoopen2026-10-15T22:44:57ZSUSE Steve TLS flaw allows MITM attacks in unpatched versionshttps://appsecscoop.com/c/vulnerabilities/peazip-flaw-allows-silent-execution-of-local/AppSec Scoopen2026-10-15T20:55:21ZPeaZip flaw allows silent execution of local programs via crafted archiveshttps://appsecscoop.com/c/vulnerabilities/symfony-http-header-parsing-flaw-risks-cpu/AppSec Scoopen2026-10-15T20:25:12ZSymfony HTTP header parsing flaw risks CPU exhaustion and silent data losshttps://appsecscoop.com/c/vulnerabilities/jetbrains-teamcity-rce-flaw-affects-versions/AppSec Scoopen2026-10-15T19:27:15ZJetBrains TeamCity RCE flaw affects versions prior to 2026.2https://appsecscoop.com/c/vulnerabilities/tianji-1-31-29-patch-resolves-critical-remote/AppSec Scoopen2026-10-15T19:02:18ZTianji 1.31.29 Patch Resolves Critical Remote Code Execution in Survey Templateshttps://appsecscoop.com/c/vulnerabilities/unauthenticated-zip-download-flaw-in-lychee-photo/AppSec Scoopen2026-10-15T18:33:00ZUnauthenticated ZIP Download Flaw in Lychee Photo Manager Exposes Albumshttps://appsecscoop.com/c/vulnerabilities/lychee-photo-manager-flaw-allows-item-release-via/AppSec Scoopen2026-10-15T18:20:08ZLychee photo manager flaw allows item release via test payment gatewayhttps://appsecscoop.com/c/vulnerabilities/amazon-neptune-graph-import-flaw-risks-credential/AppSec Scoopen2026-10-15T17:10:44ZAmazon Neptune graph import flaw risks credential thefthttps://appsecscoop.com/c/vulnerabilities/organizations-urged-to-patch-wavlink-wn530hg4b/AppSec Scoopen2026-10-15T15:52:25ZOrganizations urged to patch Wavlink WN530HG4B routers to block public heap overflow exploitshttps://appsecscoop.com/c/vulnerabilities/bank-of-america-assigns-4-000-staff-to-remediate/AppSec Scoopen2026-10-15T15:40:53ZBank of America assigns 4,000 staff to remediate AI-identified software vulnerabilitieshttps://appsecscoop.com/c/vulnerabilities/organisations-at-risk-aws-healthlake-mcp-ssrf/AppSec Scoopen2026-10-15T14:25:04ZOrganisations at Risk: AWS HealthLake MCP SSRF Lets Users Steal Temp Credentials via Pagination Tokenshttps://appsecscoop.com/c/vulnerabilities/sql-injection-in-link-whisper-free-0-9-7-allows/AppSec Scoopen2026-10-15T14:04:21ZSQL Injection in Link Whisper Free 0.9.7 Allows Blind Attacks on Affected Systemshttps://appsecscoop.com/c/vulnerabilities/litellm-gateway-flaws-allow-low-priv-users-to/AppSec Scoopen2026-10-15T14:03:03ZLiteLLM gateway flaws allow low-priv users to seize admin controlhttps://appsecscoop.com/c/vulnerabilities/unpatched-kanbn-0-6-0-ssrf-lets-attackers-steal/AppSec Scoopen2026-10-15T04:16:12ZUnpatched Kanbn 0.6.0 SSRF lets attackers steal cloud metadata and access internal services without credentialshttps://appsecscoop.com/c/vulnerabilities/unauthenticated-dgraph-zero-admin-flaw-risks/AppSec Scoopen2026-10-15T04:16:12ZUnauthenticated Dgraph Zero Admin Flaw Risks Cluster Stabilityhttps://appsecscoop.com/c/vulnerabilities/sharepoint-server-subscription-edition-users-face/AppSec Scoopen2026-10-15T04:16:12ZSharePoint Server Subscription Edition users face high-severity remote privilege escalation risk in CVE-2026-102866https://appsecscoop.com/c/vulnerabilities/znuny-header-flaw-allows-password-free-admin/AppSec Scoopen2026-10-15T04:16:12ZZnuny header flaw allows password-free admin login in versions before 7.3.7https://appsecscoop.com/c/vulnerabilities/unpatched-wordpress-sites-face-default-admin/AppSec Scoopen2026-10-15T04:07:27ZUnpatched WordPress sites face default admin takeover via Abandoned Cart Pro token forgery CVE-2026-97657https://appsecscoop.com/c/cyber-attacks/global-firms-hit-by-1b-scams-as-microsoft-and/AppSec Scoopen2026-10-15T04:07:27ZGlobal firms hit by 1B scams as Microsoft and Japan shut down YAM Store networkhttps://appsecscoop.com/c/vulnerabilities/net-dos-patch-available-for-versions-8-9-10-and-11/AppSec Scoopen2026-10-15T00:21:26Z.NET DoS Patch Available for Versions 8, 9, 10 and 11https://appsecscoop.com/c/vulnerabilities/net-pkcs-flaw-triggers-unauthenticated-cpu/AppSec Scoopen2026-10-15T00:21:26Z.NET Pkcs flaw triggers unauthenticated CPU exhaustion across versions 8 to 11https://appsecscoop.com/c/vulnerabilities/palo-alto-urges-strict-controls-as-checkov-3-3/AppSec Scoopen2026-10-15T00:21:26ZPalo Alto urges strict controls as Checkov 3.3 flaw allows local users to write files anywherehttps://appsecscoop.com/c/vulnerabilities/palo-alto-alerts-patch-cortex-xsoar-xsiam-os/AppSec Scoopen2026-10-15T00:21:26ZPalo Alto Alerts: Patch Cortex XSOAR/XSIAM OS Query Packs to Block Remote Command Executionhttps://appsecscoop.com/c/vulnerabilities/cisco-issues-urgent-updates-for-email-gateways/AppSec Scoopen2026-10-15T00:21:26ZCisco issues urgent updates for email gateways facing active exploitationhttps://appsecscoop.com/c/vulnerabilities/hestia-panel-users-urged-to-update-to-1-10-5/AppSec Scoopen2026-10-15T00:21:26ZHestia Panel Users Urged to Update to 1.10.5 After Critical Root Escalation Flawhttps://appsecscoop.com/c/cyber-attacks/major-ai-firms-face-containment-failures-as/AppSec Scoopen2026-10-14T18:58:42ZMajor AI firms face containment failures as models breach external systems due to missing security controlshttps://appsecscoop.com/c/vulnerabilities/stills-media-processor-patch-urgent-for-versions/AppSec Scoopen2026-10-14T18:29:09ZStills Media Processor Patch Urgent for Versions Before 25.24.2https://appsecscoop.com/c/vulnerabilities/juniper-junos-os-j-web-flaw-grants/AppSec Scoopen2026-10-14T18:11:30ZJuniper Junos OS J-Web flaw grants unauthenticated remote code executionhttps://appsecscoop.com/c/vulnerabilities/orgs-at-risk-juniper-bgp-flaw-allows/AppSec Scoopen2026-10-14T18:07:34ZOrgs at risk: Juniper BGP flaw allows unauthenticated root access if monitoring is activehttps://appsecscoop.com/c/vulnerabilities/microsoft-fixes-high-severity-net-wpf/AppSec Scoopen2026-10-14T12:55:36ZMicrosoft Fixes High-Severity .NET WPF Deserialization Flaw in Versions 8 to 11