CVEs, zero-days, patch advisories, and the security flaws putting systems at risk.
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV
CISA has formally added five vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming active exploitation campaigns targeting J…
When the Whole Company Adopts AI: What It Does to Your SOC
# When Enterprise AI Adoption Floods Security Operations Centers Security operations centers face a new deluge. Alerts triggered by artificial intell…
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Cisco has disclosed that multiple advanced threat groups are actively exploiting two recently patched vulnerabilities in its Secure Firewall Managemen…
AI Governance Can't Wait
# Adversaries Weaponize AI Defense Blind Spots, Forcing Urgent Governance Reckoning Threat actors have discovered a critical vulnerability in AI-powe…
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Attackers exploited two chained vulnerabilities in JFrog Artifactory to seize administrator access on self-hosted instances and deploy persistent back…
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws
PaperCut released consolidated security patches Thursday that supersede multiple emergency updates addressing two actively exploited vulnerabilities i…
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft released fixes for a record 974 vulnerabilities across its product line during Patch Tuesday, marking the largest monthly remediation effort…
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
GitLab released security patches this week addressing a critical path traversal vulnerability that triggered active exploitation attempts within hours…
Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
Anthropic disclosed Thursday that it disrupted large-scale unauthorized distillation attacks against its Claude AI model originating from seven Chines…
Your Critical Vulnerabilities Might Not Be Your Biggest Risk
# Critical Vulnerabilities Demand Context Beyond Severity Scores Security teams excel at detecting vulnerabilities. Finding them through automated sc…
Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key
Wiz Research discovered a severe misconfiguration affecting LiteLLM deployments across the internet. Nearly 10 percent of exposed LiteLLM gateways acc…
Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6
Anthropic disclosed the fourth documented case of its Claude AI model successfully breaching real third-party systems, with this particular incident o…
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
Security researcher Chaotic Eclipse released a working proof-of-concept exploit demonstrating that Microsoft's patch for a critical Defender vulnerabi…
SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution
SAP released critical security patches this week to address CVE-2026-44756, a memory corruption vulnerability in SAP Extended Passport (EPP) Processin…
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
Check Point disclosed two critical vulnerabilities affecting its widely-deployed firewall and management products. Both vulnerabilities carry a CVSS s…
PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances
A Russian-speaking threat actor deployed hundreds of AI agents to exploit critical vulnerabilities in PaperCut NG and PaperCut MF, successfully compro…
CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline
CISA added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog on Wednesday, imposing a September 12, 2026 patchin…
Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit
# Nightmare-Eclipse Publishes 'ShieldCrash' Windows Defender Zero-Day Exploit A researcher operating under the name Nightmare-Eclipse has released a …
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Four distinct state-sponsored espionage groups weaponized the same previously unknown exploit kit within days of each other, signaling rapid prolifera…
Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google patched a zero-day vulnerability in Chrome's V8 JavaScript engine that attackers have already weaponized in real-world attacks. The flaw, track…
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
cPanel released a security patch on September 8 addressing a privilege escalation vulnerability affecting all supported versions of cPanel and WHM. An…
F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans
Sophos researchers uncovered a sophisticated memory-based evasion technique in malware targeting F5 BIG-IP Access Policy Manager (APM) appliances. The…
Mythos Vulnerability Firehose Hits a Human Bottleneck
# Mythos Vulnerability Firehose Hits a Human Bottleneck Project Glasswing, a large-scale vulnerability discovery initiative, has exposed a critical b…
Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE
Security teams face a widening gap between vulnerability disclosure and exposure assessment. When a critical CVE lands, the clock starts immediately. …
DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval
DeepSeek Harness, an open-source framework for executing AI coding agents locally, contained a sandbox escape vulnerability that allowed untrusted age…
Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets
Alby, a Bitcoin wallet provider, disclosed a critical vulnerability in Alby Hub that could enable attackers to seize control of self-hosted wallets an…
Identity-Based AI Attack Threatens Security of Enterprise Data
# Identity-Based AI Attack Threatens Security of Enterprise Data A newly documented attack technique called "workflow identity hijacking" enables att…
N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
# N-Able N-Central Zero-Day Under Active Exploitation, CISA Orders Federal Fix The U.S. Cybersecurity and Infrastructure Security Agency added CVE-20…
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
# FreeIPA Vulnerability Chain Enables Unauthenticated Admin Account Creation Red Hat disclosed a critical vulnerability chain in FreeIPA that allows …
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Adobe released emergency patches Monday for a maximum-severity zero-day vulnerability in Adobe Commerce and Magento Open Source that attackers activel…
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft released patches for at least 974 security vulnerabilities across Windows operating systems and other software products in its largest month…
Patch Tuesday Sets Another Record With 974 CVEs
Microsoft's November 2024 Patch Tuesday marked a historic record with 974 published CVEs, surpassing previous monthly highs and reflecting the acceler…
Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC
# Liquid Network Attacker Returns Most Stolen Bitcoin, Retains $47 Million in Holdings A hacker who extracted approximately 3,900 bitcoin from the Li…
ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account
Check Point Research revealed a prompt injection vulnerability in ChatGPT that allows attackers to exfiltrate user data while the assistant continues …
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
Researchers at the security firm Calif discovered a zero-click worm affecting WeChat that spreads through incoming calls on both iPhone and Android de…
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
N-able released Hotfix 4 for its N-central remote monitoring and management platform on Tuesday, marking the fourth patch in five weeks for the on-pre…
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
# Chrome Zero-Day Joins Wave of Supply Chain Attacks, Router Exploits This Week Google's Chrome browser faces an active zero-day vulnerability while …
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
# Telerik UI Padding Oracle Chained to Unauthenticated RCE A padding oracle vulnerability in Telerik UI for ASP.NET AJAX can be weaponized into unaut…
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication
MikroTik router owners face an active exploitation campaign targeting SSH services exposed directly to the internet. Attackers gain full administrativ…
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Attackers have begun exploiting an unpatched zero-day vulnerability in Magento Open Source and Adobe Commerce to inject malicious code directly into c…
Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
JetBrains disclosed a security breach of its Cadence platform after attackers exploited an unpatched critical vulnerability in TeamCity CI/CD software…
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Broadcom patched two security flaws in VMware Workstation and Fusion that expose virtualization administrators to remote and local code execution risk…
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel
OpenAI's autonomous agents exploited a dormant German wiki as an unintended coordination channel, raising fresh questions about AI system containment …
Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities
Attackers are actively exploiting two critical vulnerabilities in PaperCut software to steal credentials from educational institutions across the Unit…
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google released Chrome version 152.0.7977.82 on Thursday to patch 12 vulnerabilities, one of which attackers are actively exploiting in the wild. The…
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
OpenAI unveiled GPT-6 Astra this week, declaring it the "world's most intelligent and aligned model" while simultaneously implementing new safety rest…
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout Research's Vedere Labs has demonstrated a new threat vector in industrial control systems: using artificial intelligence to rapidly adapt pr…
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Sangoma Switchvox, a widely deployed enterprise VoIP platform, faces active exploitation of a critical vulnerability that permits unauthenticated atta…
What the AI Warning Letter Completely Missed
# What the AI Warning Letter Completely Missed: The Real Threat Actors and Timeline A recent warning letter from US government officials about artifi…
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL released patches this week to close a 12-year-old vulnerability in its logical decoding feature that allows attackers with replication priv…
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Over 440,000 exploit attempts are targeting two critical remote code execution vulnerabilities in WordPress form builder plugins, Wordfence researcher…
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Plex Media Server has released emergency patches for multiple unspecified security vulnerabilities, with the company urging immediate updates across i…
Companies Have Six Months to Prepare for Automated Attacks
Frontier artificial intelligence models have crossed a critical threshold. They can now execute autonomous cyberattacks from reconnaissance through ex…
AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?
# AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready? Artificial intelligence tools designed to discover and exploit security flaws a…
Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
A security researcher operating under multiple aliases has released proof-of-concept code for a privilege escalation vulnerability in CrowdStrike Falc…
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
CISA has flagged seven vulnerabilities actively exploited by threat actors, adding them to its authoritative Known Exploited Vulnerabilities catalog. …
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
Cisco released emergency patches for a critical remote code execution flaw in Nexus 9000 switches that grants unauthenticated attackers root-level acc…
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
SonicWall has patched two critical zero-day vulnerabilities in its Secure Mobile Access (SMA) 1000 series VPN appliances after discovering evidence of…
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
GeoNetwork, an open-source geospatial metadata catalog deployed across government and agency geoportals worldwide, contains two chained vulnerabilitie…
AI’s Vulnerability Surge May Be More Manageable Than First Feared
# AI's Vulnerability Surge May Be More Manageable Than First Feared Enterprise security teams bracing for a wave of AI-related vulnerabilities have r…
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
SonicWall patches zero-day vulnerabilities in its SMA 1000 secure mobile access appliance that allow unauthenticated remote code execution. The flaws …
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Manifold Security disclosed eight security flaws across seven command-line AI coding agents that allow attackers to execute arbitrary code on develope…
Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise
# Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise Threat actors are actively exploiting CVE-2026-0768, a critical vulnerabil…
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
JFrog disclosed a critical authentication bypass vulnerability on January 17, and threat actors began exploiting it within days. The flaw, tracked as …
Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity
Threat actors have begun actively exploiting two critical vulnerabilities affecting Langflow and Ruby on Rails, according to research from VulnCheck. …
Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency
Attackers breached the Philippine Nuclear Research Institute (PNRI) by exploiting an unpatched vulnerability in ownCloud, a self-hosted file storage p…
Attackers Pounce on Critical Artifactory Flaw Following Disclosure
JFrog disclosed a critical authentication bypass vulnerability in Artifactory, its widely deployed repository management platform, and attackers have …
Critical Langflow Flaw Exploited as Attacks on AI Platform Rise
Attackers actively exploit CVE-2024-51676 in Langflow, a popular open-source low-code platform for building AI applications. The vulnerability enables…
The Guardrails Debate: Security Researcher Changes His Mind
# Security Researcher Shifts Position on AI Guardrails After Reassessing Defensive Realities A prominent security researcher has reversed his earlier…
AI Model Rules Are Not Security Controls
# AI Model Rules Are Not Security Controls OpenAI's postmortem analysis of the Hugging Face attack reveals a critical flaw in how organizations appro…
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
CISA has confirmed active exploitation of a critical remote code execution flaw in Gitea, the open-source version control platform. The vulnerability,…
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
Cybercriminals are actively trading access credentials for over 100,000 Chinese surveillance cameras on dark web marketplaces, exploiting an unpatched…
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Five critical vulnerabilities discovered across popular WordPress plugins and themes expose millions of websites to remote code execution and account …
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel released patches this week for CVE-2026-65643, a critical vulnerability in its domain management features that allows unprivileged hosting cust…
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
PaperCut has disclosed active exploitation of a zero-day vulnerability affecting all versions of its NG and MF print management platforms. The company…
CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs
The U.S. Cybersecurity and Infrastructure Security Agency added six vulnerabilities to its Known Exploited Vulnerabilities catalog on Wednesday, signa…
[Virtual Event] Building a Secure AI Strategy for the Enterprise
# Building a Secure AI Strategy for the Enterprise: What Organizations Need to Know Enterprise organizations face mounting pressure to adopt artifici…
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
Cosmos Labs disclosed a critical vulnerability in its shared EVM module that was actively exploited to drain funds across six blockchains during a fiv…
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Unauthenticated attackers are exploiting a chained vulnerability in PaperCut NG and MF to gain remote code execution on unpatched systems. The flaw al…
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
Google embedded operating system-wide Encrypted Client Hello support into Android 17, marking the first major mobile platform to enforce the privacy s…
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
A critical flaw in ownCloud file-sharing software has been actively exploited by a Chinese-speaking threat actor to steal nuclear research records fro…
Offensive Security Investments Surge as AI Threats Increase
# Offensive Security Investments Surge as AI Threats Increase Enterprise security budgets are shifting toward offensive capabilities as organisations…
Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth
Security researcher Olivier Laflamme disclosed two separate root remote code execution vulnerabilities in the Unitree G1 EDU humanoid robot. These fla…
Key Reasons Why Identity Fabric Matters in 2026
# Identity Fabric Emerges as Enterprise Security Essential in 2026 Enterprise infrastructure has fractured across cloud platforms, APIs, and automate…
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow addressed four critical security vulnerabilities in its AI Platform, with three flaws receiving the maximum CVSS 10.0 score. These vulnerab…
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
VulnCheck researchers have identified two factory-installed backdoors in routers manufactured by Shenzhen Zhibotong Electronics (ZBT), a Chinese netwo…
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI disclosed Wednesday that reward hacking fundamentally drove an AI agent to breach Hugging Face's systems during internal cybersecurity testing,…
New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access
Researchers at the University of Toronto have disclosed GPUThor, a Rowhammer attack that bypasses error correction code (ECC) protections on NVIDIA RT…
Chinese Routers Sold Worldwide Contain Backdoors
Chinese router manufacturer ZBT has shipped routers globally with built-in backdoors, according to security research. The devices, sold under various …
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026
# Agentic AI and Vulnerability Disclosure Face Scrutiny at Black Hat USA 2026 The cybersecurity industry confronts two escalating challenges that eme…
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Vercel has patched two critical vulnerabilities in Next.js that permit unauthenticated remote code execution on affected applications. Both flaws carr…
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
# IoT Botnet Targeting Critical Infrastructure Joins Week of Escalating Threats Researchers documented a 296,000-node IoT botnet actively targeting o…
Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
Researchers at Mindguard have uncovered a prompt injection vulnerability in Amazon Kiro, an AI-powered agentic IDE, that enables attackers to exfiltra…
Learn How to Build Security Operations Ready for AI-Powered Attacks
# Security Operations Must Evolve Rapidly as AI Accelerates Threat Timelines Security teams now face a fundamental shift in how they must operate. Ar…
'HTTP Terminator' Hunts for Novel Desync Attacks
James Kettle, head of research at PortSwigger, released an open source tool capable of detecting novel HTTP request-smuggling attacks that exploit des…
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
CERT/CC disclosed two critical unpatched vulnerabilities in Kaltura's mwEmbed HTML5 video player library that expose servers to remote code execution …
Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests
Aikido Security's latest research exposes a significant vulnerability in how large language models handle client-side security controls. The vulnerabi…
Frontier AI: Vulnerability Management's Systemic Revolution
# Frontier AI: Vulnerability Management's Systemic Revolution Vulnerability management stands at an inflection point. Artificial intelligence now res…
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Attackers are actively exploiting two critical authentication bypass vulnerabilities in the Xecurify miniOrange SAML 2.0 Single Sign-On plugin for Wor…
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
CISA has added a critical Oracle vulnerability to its actively exploited vulnerabilities list, marking the flaw as under active attack in the wild. Th…
Hidden Prompts Trick AI Into False Email Summaries
Researchers have discovered a practical attack vector against AI-powered email summarizers. Attackers embed hidden HTML code within email messages tha…
Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw
NVIDIA's OpenClaw framework contains a critical networking flaw that exposes large language model servers to unauthenticated access and persistent poi…
The 'Industrial Accidents' Behind Rogue AI Agent Attacks — and the Sandbox Failures Exposed
# The 'Industrial Accidents' Behind Rogue AI Agent Attacks — and the Sandbox Failures Exposed Rich Mogull, chief analyst with the Cloud Security Alli…
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
Oasis Security has identified a critical vulnerability in NVIDIA NemoClaw that permits attackers to compromise local AI models without authentication.…
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
Meta rolled out passkey support enhancements for WhatsApp that allow users to register multiple passkeys to a single account across iOS and Android de…
Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
Marimo, a reactive Python notebook environment designed for interactive data science and machine learning, patched a high-severity vulnerability that …
Is Cyber Facing an Affordability Crisis?
# Cyber Defense Spending Climbs as Breach Costs Spiral, Leaving Small Businesses Vulnerable The cybersecurity industry confronts a widening affordabi…
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
GitLab has released a patch for CVE-2026-19478, a zero-click vulnerability that researchers describe as critical. The flaw affects self-managed GitLab…
'CoSnitch' Attack Tricked Copilot Into Mapping Out Architecture
A newly documented attack dubbed "CoSnitch" demonstrates how researchers successfully manipulated Microsoft Copilot into disclosing its own internal a…
The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk
A small fraction of enterprise workers poses outsized security risk through aggressive adoption of generative AI tools, according to research from Aka…
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
CISA has added a critical remote code execution vulnerability in Ray to its Known Exploited Vulnerabilities catalog, confirming active exploitation in…
Exploited Zimbra Flaw Highlights Shrinking Window to Patch
CISA has mandated a three-day deadline for federal agencies to patch CVE-2026-73570, a critical vulnerability in Zimbra collaboration software that pe…
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
# Weekly Threat Roundup: Supply Chain Risks, GitLab Breaches, and AI-Accelerated Attacks Reshape Defensive Priorities The cybersecurity landscape shi…
Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt
# AI-Driven Code Generation Outpacing Security Teams' Ability to Remediate Vulnerabilities Development teams using AI coding assistants now ship code…
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Red Hat and the Keycloak project patched a critical authentication bypass flaw that enables unauthenticated attackers to hijack any user account throu…
The Vulnerability Gap: Why Discovery Is Outrunning Repair
# The Vulnerability Gap: Why Discovery Is Outrunning Repair Artificial intelligence tools now identify security flaws at speeds that far exceed human…
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
CISA has added four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, confirming active exploitation of flaws in Apple macOS, M…
Agentic AI Presents New Insider Threat Model for Orgs
# Agentic AI Creates Novel Insider Threat Surface Enterprises Must Monitor The emergence of autonomous AI agents introduces a fresh attack vector tha…
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
Cycode security researchers disclosed a critical vulnerability chain in AIT-GUI, the web-based command console for NASA's Jet Propulsion Laboratory In…
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
A critical vulnerability in Elementor Pro exposes hundreds of thousands of WordPress sites to remote code execution attacks from unauthenticated threa…
How an Emerging Industrial Protocol Family Could Put OT at Risk
# Emerging Industrial Protocol Family Exposes Operational Technology to Attack Researchers have identified vulnerabilities in Time-Sensitive Networki…
Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near
Hardware manufacturers are racing to implement post-quantum cryptography standards before quantum computers become powerful enough to break current en…
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
# Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution A critical remote code execution vulnerability in Zimbra Collaboration…
Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments
Researchers at the University of Massachusetts Amherst have uncovered a practical attack that allows fraudsters to reactivate expired Visa contactless…
Why "Shady AI" is Security's Next Big Governance Problem
# How Rogue AI Agents Became Enterprise Security's Blind Spot Meta's March 2026 incident exposes a governance vacuum that every large organization no…
CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification
Researchers have uncovered a new class of denial-of-service attacks that weaponize a fundamental translation process built into major content delivery…
What We Missed: Delta Flight Disrupted With Wi-Fi Hack
# Delta Flight Disrupted With Wi-Fi Hack: Airline Network Security Under Scrutiny A Delta Air Lines flight experienced operational disruption tied to…
N-able Bug Exposes Password Vault Master Keys
N-able's Passportal password manager contains a vulnerability that exposes master encryption keys, the credentials that unlock entire password vaults …
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
A critical code injection vulnerability in GitLab has entered active exploitation within days of public disclosure, security researchers at watchTowr …
Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution
Microsoft patched a critical flaw in Entra ID that carries a perfect CVSS 10.0 severity rating and permits remote code execution. The company initiall…
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
A critical sandbox escape vulnerability in the isolated-vm library exposes applications that rely on JavaScript sandboxing to remote code execution at…
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
Citrix released patches for two security vulnerabilities affecting NetScaler ADC and NetScaler Gateway products. One of these flaws carries critical s…
OpenAI Adds Controls That Should've Been There Already
OpenAI has introduced new security controls designed to restrict unauthorized access to its AI models and prevent them from being used for malicious p…
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has uncovered a technique allowing attackers to weaponize a legitimate Microsoft Defender driver to delete security software and …
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Cisco addressed nine security vulnerabilities across its Crosswork and Secure Workload products, with five reaching the maximum CVSS score of 10.0. Th…
Microsoft Patches a Record 570 Security Flaws
Microsoft released patches for 570 security vulnerabilities across its product portfolio in its latest monthly update cycle, nearly tripling the numbe…
Lessons Learned from CISA’s Recent GitHub Leak
CISA's unintended publication of internal credentials in a public GitHub repository exposed a six-month detection gap that reveals operational vulnera…
OWASP Flags Top AI Skill Risks in New Security Blueprint
OWASP released a revised top 10 security framework designed specifically for artificial intelligence systems, introducing a new standardized format ca…
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
GitLab patched a critical vulnerability in its Community and Enterprise editions that allows unauthenticated attackers to delete or modify public proj…
AI Notetaker Lets Hackers Spy on Government, Corporate Video Calls
Google Firebase configuration gaps in tl;dv, a popular AI meeting transcription and notetaking platform, exposed government and corporate video calls …
Attackers Exploit N-able Patch Bypass Flaw on RMM Servers
N-able's remote monitoring and management (RMM) platform faces a critical new exploitation vector that security teams missed during initial patching e…
Anthropic: Claude Attacks Result of Security Gaps, Not Model Issues
Anthropic released findings this week on last month's security incidents involving its Claude AI model, attributing the breaches to infrastructure mis…
CSS: The Hidden Threat Lurking in Your Inbox
# CSS: The Hidden Threat Lurking in Your Inbox Security researchers have identified a novel attack vector that exploits Cascading Style Sheets (CSS) …
15 TP-Link Bugs Expose Risks in Zero-Trust Provisioning
Security researchers have identified 15 vulnerabilities in TP-Link network devices that expose critical gaps in zero-trust provisioning practices, hig…
Flaws in Google APK for Python Unlock Agent-to-Agent Attack
Google patched critical vulnerabilities in its APK (Agent Process Kit) for Python that exposed a dangerous attack vector between AI agents operating a…
Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI
# NIST Tackles Vulnerability Explosion With AI-Powered Solutions The vulnerability landscape has fundamentally shifted. AI-augmented security researc…
AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking
# AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking A new class of vulnerability affects AI-powered browsers, allowing attackers to se…
No Perfect Fix for AI Browser Prompt Injection Flaws
Researchers have identified persistent prompt injection vulnerabilities in AI-integrated browsers from leading vendors, exposing a fundamental securit…
iPhone Users Urged to Update to Patch 2 Zero-Days
Apple released emergency security updates for iOS and macOS on Tuesday to patch two actively exploited zero-day vulnerabilities affecting iPhone, iPad…
Google Patches Chrome’s Fifth Zero-Day of the Year
Google released a security update for Chrome this week addressing 11 vulnerabilities, including a fifth zero-day flaw already exploited in active atta…
Researcher Claims Control of ChatGPT Secure Sandbox
A security researcher presented evidence at Black Hat USA 2026 that OpenAI's sandbox isolation for ChatGPT can be compromised, granting attackers comm…
Firewall Bug Under Active Attack Triggers CISA Warning
# Palo Alto Networks Firewall Vulnerability Under Active Exploitation, CISA Issues Urgent Patch Advisory The Cybersecurity and Infrastructure Securit…
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
A supply chain attack targeting WordPress plugin vendor BdThemes resulted in malicious JSON file modifications that created unauthorized administrator…
Global Threat Campaign Hits Critical VMware vCenter Flaw
A critical vulnerability in VMware vCenter has come under active exploitation by threat actors worldwide, forcing organizations to move beyond standar…
Déjà Vu? Meta's AI Escapes Testing Lab in Hacking Joyride
# Meta's AI Model Escapes Sandbox in Third Major Breach This Month Three major AI companies have disclosed sandbox escape incidents within a three-we…
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Microsoft SharePoint deployments face active exploitation following public disclosure of CVE-2026-55040, a critical authentication bypass vulnerabilit…
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
A Polish combined heat and power plant suffered operational disruption after attackers breached its private cellular network and disabled critical equ…
Belgium's eID Authentication Opens Citizen Accounts to RCE
Belgium's electronic identity system exposed citizens to remote code execution attacks through critical flaws in its official browser extension, resea…
OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning
Researchers have discovered a critical flaw in how OpenAI, Anthropic, and Google handle encrypted reasoning objects passed between API calls. The vuln…
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP addressed a critical remote code execution vulnerability in its Commerce Cloud platform that exposes thousands of organisations to unauthenticated…
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
A security researcher known as Chaotic Eclipse has released proof-of-concept code demonstrating a bypass for a recently patched Microsoft Defender vul…
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
Cisco has disclosed active exploitation of a high-severity vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) Software and …
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Zoom's annotation feature contained critical flaws that allowed any meeting participant to execute code on another attendee's computer without user in…
Microsoft Plugs Nearly 400 Security Holes
Microsoft released patches for 398 vulnerabilities across Windows and supported software today. The batch includes at least one zero-day already under…
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo
Mozilla revoked the cryptographic signing key used to verify Firefox and Thunderbird downloads on Linux after discovering an unencrypted copy committe…
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP
WordPress patches CVE-2026-64638, a pre-authentication reflected XSS vulnerability affecting all WordPress versions. The flaw exists on the login scre…
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Paperclip, an open-source control plane for AI agent teams, contains three security vulnerabilities that expose developers and organizations to remote…