JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html iPhone Bug Let Apps Record After You Tapped “Don’t Allow”, With No Orange Dot GHSA-ghgh-57qv-h687: Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines France blames Iran for supermarket hack meltdowns GHSA-f7vj-6669-qvv4: Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation GHSA-2xwh-426q-42c5: Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user) GHSA-5xjx-9qx6-jcrv: Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace GHSA-x89h-7h96-v88f: croc: Overwrite-confirmation bypass via a crafted “croc-stdin-” filename on receive GHSA-9hq4-hm3j-jmph: DDEV incomplete tar symlink traversal fix allows host file overwrite – Incomplete fix of CVE-2026-32885 CISA Announces Enhanced Reporting Form for Cyber Incidents GHSA-h89v-g948-47vp: Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser GHSA-9qq5-422f-33c2: Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin GHSA-rjr3-43j3-4q8g: Kubeflow Pipelines API server lacks authorization for shared pipeline uploads GHSA-44r8-3p76-84mw: FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files How to Identify Ransomware Data Exposure Using Leaked File Trees SEGA newsletter data breach exposes 2.2 million email addresses Ransomware claim: BOZZUTO (vortex) Ransomware claim: SAMTEC (vortex) Ransomware claim: ARTHREX – 700+ GB (vortex) Ransomware claim: SOLENIS – 1.65tb (vortex) Ransomware claim: El Camino Health – 350+ GB (vortex) Ransomware claim: SimonMed – 45+ GB (vortex) Ransomware claim: Andersen Construction – 200+ GB (vortex) Ransomware claim: Karlstorz – 500 GB (vortex) Ransomware claim: Air Communities (vortex) Ransomware claim: Storage Mart (vortex) CISA Announces Enhanced Reporting Form for Cyber Incidents N-able takes cloud platform offline after 30+ “zero-days” published York University breach exposed personal information dating to 2007 Dad Asked 6-Year-Old Daughter if ‘She Had the Gun’ Before He Left Her in Line for Pokémon Cards Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion Data breach at hearing aid giant Amplifon impacts thousands Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India Attackers backdoor trusted AWS integrations to steal secrets Adems14 Data Leak Claim Lists 100,826 Records Covering 36,628 People and Property Service Data Darkside database Colorbox Data Leak Claim Lists 7.67 Million Rows With Customer, Shipping and Invoice Data You can change Windows settings directly from a search now – how to try it Impeachment Vote Looms for Hegseth Watch: Where Do Our Generic Drugs Come From? We Dug to Find Out. Binance calls alleged “ShinyHunters” post a scam attempt France Blames Iran for the Supermarket Fridge Attacks Ransomware claim: B… W… (SilentRansomGroup) Ransomware claim: Published (PixelLeaks) Ransomware claim: Ornico (Global Secret Group) Ransomware claim: Heartland Honda (Global Secret Group) Ransomware claim: La’ala Al Kuwait Real Estate Co KSCC (Eclipse) GHSA-h667-4jj2-cgv4: fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring GHSA-52c6-99qm-3hqr: zt-zip: Path traversal in fluent API unpack Home Research & Field Notes