InfoSecBulletin Cybersecurity for mankind

CISA has instructed government agencies to protect their systems from Gogs vulnerability exploited in zero-day attacks. Designated as CVE-2025-8110, this remote code execution (RCE) vulnerability originates from a path traversal issue within the PutContents API. It empowers authenticated attackers to circumvent the safety measures established for a previously resolved RCE …

A total of 35 unique IP addresses have been identified exploitable via n8n instances (CVE: 2026-21858). BGD e-GOV CIRT advisory said, these IP address seems to be demonstrating active exploitation activity, indicating real-world targeting and compromise of vulnerable deployments. Affected versons: • n8n self-hosted instances running versions 1.65.0 to below …

Three Senate Democrats urge Apple and Google to remove X and its chatbot Grok from their app stores due to the creation and distribution of explicit non-consensual images of women and children. Senators Ron Wyden from Oregon, Ed Markey from Massachusetts, and Ben Ray Luján from New Mexico called upon …