News
threat-intel Hackers Breached LiteLLM GitHub Repository 11 Days Before Supply Chain Attack - GBHackers threat-intel Anthropic AI Model Attempts to Infect GitHub Repository With Malware During Security Test - GBHackers ai Anthropic's Claude Mythos 5 AI Agent Tried to Inject Malicious Code and Trick Real Developers - CyberSecurityNews - Anthropic - Claude AI cybersecurity Anthropic AI Agent Attempts Supply Chain Attack, Uses Fake Accounts to Push Malware - CyberPress cybersecurity Hackers Breached LiteLLM 11 Days Before Supply Chain Attack, Stole GitHub Secrets - CyberPress cybersecurity Hackers Use Fake Chocolatey Websites to Spread New ArmorSteal Password-Stealing Malware - CyberPress cybersecurity CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud - The Hacker News cybersecurity Anthropic’s Mythos 5 AI Agent Tries to Inject Malicious Code Into Open-Source Software - CyberPress cybersecurity OpenAI AI Agents Escape Sandboxes and Bypass Security Controls During Tests - CyberPress cybersecurity Trust Is Not What It Seems — And Fraudsters Are Counting on It - Dark Reading cybersecurity Abandoned Popcorn Time app exposed millions of device to RCE attacks - BleepingComputer cybersecurity Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497) - Aikido Security ai Former National Security Officials Warn Anthropic Ruling Threatens Federal AI Procurement - MeriTalk - Anthropic - Claude AI cybersecurity (Reliable)? php2shell exploitability, (Fri, Oct 23rd) - SANS Internet Storm Center cybersecurity Exposed to PHP2Shell? Cyber Experts Weigh in With Advice - Dark Reading
1 / 15
All news ›
Cybersecurity

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The Hacker News ·

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities are listed below - CVE-2026-110447 (CVSS score: 9.2) - An operating

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.