JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html GHSA-ghgh-57qv-h687: Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines France blames Iran for supermarket hack meltdowns GHSA-f7vj-6669-qvv4: Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation GHSA-2xwh-426q-42c5: Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user) GHSA-5xjx-9qx6-jcrv: Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace GHSA-x89h-7h96-v88f: croc: Overwrite-confirmation bypass via a crafted “croc-stdin-” filename on receive GHSA-9hq4-hm3j-jmph: DDEV incomplete tar symlink traversal fix allows host file overwrite – Incomplete fix of CVE-2026-32885 GHSA-h89v-g948-47vp: Moleculer: Unauthenticated Denial of Service via negative length field in the TCP transporter packet parser GHSA-9qq5-422f-33c2: Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin GHSA-rjr3-43j3-4q8g: Kubeflow Pipelines API server lacks authorization for shared pipeline uploads GHSA-44r8-3p76-84mw: FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files How to Identify Ransomware Data Exposure Using Leaked File Trees SEGA newsletter data breach exposes 2.2 million email addresses Ransomware claim: BOZZUTO (vortex) Ransomware claim: SAMTEC (vortex) Ransomware claim: ARTHREX – 700+ GB (vortex) Ransomware claim: SOLENIS – 1.65tb (vortex) Ransomware claim: El Camino Health – 350+ GB (vortex) Ransomware claim: SimonMed – 45+ GB (vortex) Ransomware claim: Andersen Construction – 200+ GB (vortex) Ransomware claim: Karlstorz – 500 GB (vortex) Ransomware claim: Air Communities (vortex) Ransomware claim: Storage Mart (vortex) CISA Announces Enhanced Reporting Form for Cyber Incidents N-able takes cloud platform offline after 30+ “zero-days” published York University breach exposed personal information dating to 2007 Dad Asked 6-Year-Old Daughter if ‘She Had the Gun’ Before He Left Her in Line for Pokémon Cards Microsoft Fixes RCE Bug in Windows Paint After Weeks of Confusion Data breach at hearing aid giant Amplifon impacts thousands Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to India Attackers backdoor trusted AWS integrations to steal secrets Adems14 Data Leak Claim Lists 100,826 Records Covering 36,628 People and Property Service Data Colorbox Data Leak Claim Lists 7.67 Million Rows With Customer, Shipping and Invoice Data You can change Windows settings directly from a search now – how to try it Impeachment Vote Looms for Hegseth Watch: Where Do Our Generic Drugs Come From? We Dug to Find Out. Binance calls alleged “ShinyHunters” post a scam attempt France Blames Iran for the Supermarket Fridge Attacks GHSA-h667-4jj2-cgv4: fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring GHSA-52c6-99qm-3hqr: zt-zip: Path traversal in fluent API unpack France blames Iran for fridge cyberattacks, says some caused fires France blames Iranian hackers for supermarket attacks that sparked fires AMD confirms GPU driver bug is wearing out your SSD – how to stop it Vanderbilt cybersecurity incident impacting campus devices and systems Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th) GHSA-w7qv-268h-9h3f: Logging Redactor: PII data in str/repr of non primitive objects was not being redacted Attackers Crash Claude’s ‘Office Party’ Flaw to Run Malicious Code on Linux Ready for a Siri AI agent? Apple under pressure to upgrade its assistant faster Home Research & Field Notes