Security Bulletin

Ping Identity says its combination of biometrics and verifiable documentation is the next step in access management.

The implant, identified by Rapid7 Labs with medium confidence as originating from North Korean state-sponsored actors, targets entities in South Korea's automotive and media sectors.

The vulnerability stems from missing authorization in PostgreSQL's logical decoding feature.

Upwind Security offers a platform that automatically maps cloud assets and refreshes data every 30 seconds to account for frequent configuration changes.

The attack occurred between 07:35 UTC and 21:45 UTC on Monday, August 31.

The critical Nexus vulnerability (CVE-2026-20212) allows unauthenticated attackers to execute code with root privileges by binding to an unrestricted IP address and reaching TCP ports 43210 and 43211.

The incident, detected on June 30, impacted the C-Track Canada system, exposing files from three Ontario courts.

Abliteration.ai aims to enable offensive cyber operations, red-teaming, and agent testing that other models refuse.

While specific CVE identifiers have not yet been assigned, Plex has directly emailed users, emphasizing the critical need to update to the latest versions to mitigate these security risks.