CISA Malcolm

CISA Cybersecurity AdvisoriesPublished 2026-10-09 14:58 UTC

View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…

— CISA Cybersecurity Advisories

Read at CISA Cybersecurity Advisories

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

The Hacker NewsCybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star…

6 hours ago

Image: BBC News Technology
Three fired OpenAI safety researchers dispute the company’s misconduct claims
Three former OpenAI safety researchers dispute the company’s claim that they mishandled sensitive information, saying they were dismissed for prioritising safety. In an open letter, they warn the firings may have a chilling effect on employees and AI safety culture.
4 hours ago
Image: BleepingComputer
Max severity SonicWall SMA1000 flaw now exploited in attacks
BleepingComputerAttackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.
12 hours ago