Category Navigation

8.0

The Hacker News 2026-10-24

Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software

7.8

The Hacker News 2026-10-24

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

7.8

The Hacker News 2026-10-24

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

8.0

Dark Reading 2026-10-23

Exposed to PHP2Shell? Cyber Experts Weigh in With Advice

8.1

The Hacker News 2026-10-23

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

7.8

Cobalt Blog 2026-10-23

Why One AI Pentest Run Isn't Enough

7.8

SentinelOne Labs 2026-10-23

The Good, the Bad and the Ugly in Cybersecurity - Week 43 (2026)

7.8

Orca Security Blog 2026-10-23

PHP2Shell: What This Week Tells Us About the Web We Built

7.8

Cybersecurity Dive 2026-10-23

PHP exploitation moves at slower-than-expected pace, but millions remain at risk

7.8

Rapid7 Blog 2026-10-23

Metasploit Wrap Up: Langflow, MongoDB, and More

7.8

Varonis Blog 2026-10-23

Go With the Flow: Taking a Shadow Dependency in GCP Dataflow Cross Tenant

7.8

SecurityWeek 2026-10-23

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

7.8

The Hacker News 2026-10-23

PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches

7.8

SecLists / Daniel Miessler 2026-10-23

Writing Is Closer to Thought Than Code

7.8

SecurityWeek 2026-10-23

Attackers Exploit Third Arista VCO Zero-Day in Four Months

7.8

The Hacker News 2026-10-23

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

7.8

The Hacker News 2026-10-23

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

7.8

The Hacker News 2026-10-23

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

7.8

SecurityWeek 2026-10-23

Atlassian Patches 75 Flaws in Data Center and Server Products

7.8

CrowdStrike Blog 2026-10-23

Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation

7.8

The Record by Recorded Future 2026-10-23

Reports of PHP bug exploitation attempts grow as experts downplay viability of exploits

7.8

Tenable Research 2026-10-22

The adversary economy: How threat actors are reacting to PHP2Shell

8.7

Varonis Blog 2026-10-22

PHP2Shell: One Upload, Full Server

7.8

Cisco Talos 2026-10-22

I had plans for that second

7.8

Palo Alto Unit 42 2026-10-22

The Current Landscape of OAuth Attacks

7.8

Imperva Research 2026-10-22

PHP2Shell: Early Attack Activity Through Imperva’s Lens

7.8

GitGuardian Blog 2026-10-22

Responding to php2shell PHP Vulnerability When You Don’t Know What Secrets Are Deployed

7.8

Tenable Research 2026-10-22

How to contain shadow AI, as it takes on multiple forms and spreads throughout your environment

7.8

Sonar Blog 2026-10-22

How do you verify AI coding agent output from any tool, not just one?

7.8

Bishop Fox 2026-10-22

The True Blast Radius of an AI Attack

7.8

Help Net Security 2026-10-22

OpenAI’s coding agents talked themselves out of being monitored

8.0

SecurityWeek 2026-10-22

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

7.8

Imperva Research 2026-10-22

Node2Shell: From Brotli Data to Remote Code Execution

7.8

SecurityWeek 2026-10-22

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

7.8

Help Net Security 2026-10-22

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

7.8

SecurityWeek 2026-10-22

Splunk, SolarWinds Release Fresh Security Updates

7.8

Help Net Security 2026-10-22

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

8.1

Infosecurity Magazine 2026-10-22

PHP2Shell Exploitation Attempt Detected by Amazon Four Days Before Vulnerability Disclosure

7.8

SecurityWeek 2026-10-22

Cisco Patches 34 Vulnerabilities Across Multiple Products

7.8

SecurityWeek 2026-10-22

PHP2Shell Exploitation Started Days Before Patches

7.8

Infosecurity Magazine 2026-10-22

Cloud Security Maturity Lags Despite Widespread Adoption, SANS Warns

7.8

SecurityWeek 2026-10-22

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

7.8

Snyk Blog 2026-10-22

Turn Your Vulnerability Backlog Into Pull Requests With Agentic Remediation

7.8

Snyk Blog 2026-10-22

PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): Update Now

7.8

Sonatype Research 2026-10-21

eMudhra CA Incident: Sonatype's Assessment and Guidance

7.8

Help Net Security 2026-10-21

Chrome puts insecure sites behind a permission prompt

7.8

Cisco Talos 2026-10-21

Compromised eMudhra intermediate certificates

7.8

Dark Reading 2026-10-21

Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens

7.8

SentinelOne Labs 2026-10-21

Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique

7.8

Dark Reading 2026-10-21

'PHP2Shell' Bugs Signal Red Alert for Security Industry

7.8

Cybersecurity Dive 2026-10-21

Weak encryption certificates could have let hackers easily spoof websites

7.8

The Record by Recorded Future 2026-10-21

PHP says AI review of critical bugs first sparked alarm in August, but signs surfaced in 2024

7.8

SecurityWeek 2026-10-21

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

7.8

SecurityWeek 2026-10-21

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

7.8

Palo Alto Unit 42 2026-10-21

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

7.8

Malwarebytes Labs 2026-10-21

PHP2Shell: Why websites are going offline for emergency security updates

7.8

Sonatype Research 2026-10-21

PHP2Shell Makes PHP Inventory and Patch Ownership Urgent

7.8

Krebs on Security 2026-10-21

Widespread PHP Flaw May Cause Many Site Outages Today

7.8

Rapid7 Blog 2026-10-21

CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

7.8

Kaspersky Securelist 2026-10-21

Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

7.8

Cisco Talos 2026-10-21

Two critical RCEs in PHP core

7.8

GitGuardian Blog 2026-10-21

What Is Credential Layer Security? The Layer Every Other Control Trusts

7.8

The Record by Recorded Future 2026-10-21

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

7.8

Cybersecurity Dive 2026-10-21

Critical PHP vulnerabilities expose most websites to potential compromise

7.8

Orca Security Blog 2026-10-21

Critical PHP “PHP2Shell” RCE Vulnerabilities Allow Unauthenticated Remote Code Execution (CVSS 9.2)

7.8

Cloudflare Blog 2026-10-21

Introducing full transaction detection for Cloudflare WAF

7.8

Cloudflare Blog 2026-10-21

Cloudflare deploys protections against php2shell vulnerability

7.8

Orca Security Blog 2026-10-21

Benchmark Your AI Security Maturity in Under a Minute

7.8

Help Net Security 2026-10-21

PHP2Shell: Critical PHP vulnerabilities patched, update now!

7.8

Imperva Research 2026-10-21

PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment

7.8

CyberScoop 2026-10-21

PHP releases emergency fixes for 2 critical vulnerabilities

7.8

Rapid7 Blog 2026-10-21

Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days

7.8

Cloudflare Blog 2026-10-21

How Commerce.com and Cloudflare are getting storefronts ready for AI agents

7.8

SecurityWeek 2026-10-21

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

8.3

Malwarebytes Labs 2026-10-21

Signal bug could let someone keep listening after you hang up

7.8

Detectify Blog 2026-10-21

Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

7.8

Help Net Security 2026-10-21

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June

7.8

Infosecurity Magazine 2026-10-21

Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches

7.8

SecurityWeek 2026-10-21

Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

7.8

Tenable Research 2026-10-21

php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities

7.8

Help Net Security 2026-10-21

Safari blocks trackers that turn your email into a tracking ID

7.8

Help Net Security 2026-10-21

Privacy-preserving AI can protect your heart data, the bill is the problem

7.8

CrowdStrike Blog 2026-10-21

CrowdStrike Protects Customers from Threats Delivered via PHP2Shell

7.8

Snyk Blog 2026-10-21

AI Model Risk Depends on What the Model Can Reach

8.0

Tenable Research 2026-10-20

Oracle October 2026 Critical Patch Update Addresses 1209 CVEs

7.8

Orca Security Blog 2026-10-20

From Security Debt to Zero Criticals: AI Vulnerability Remediation with Orca MCP and Claude Code

7.8

Help Net Security 2026-10-20

Chrome flags malicious commands that scammers pass off as fixes

7.8

Dark Reading 2026-10-20

Close Identity Gaps in Software Development Before Unleashing AI

7.8

Cisco Talos 2026-10-20

There's only so much code: the rise in vulnerability numbers

7.8

Cobalt Blog 2026-10-20

Dissecting the ax-llm CVEs: Why Edge AI Memory and Execution Boundaries Matter

7.8

Help Net Security 2026-10-20

Incomplete security patches show hackers where to look next

7.8

Infosecurity Magazine 2026-10-20

Researchers Warn OpenCode Quietly Patched Critical RCE Flaw, Leaving Users At Risk

7.8

SecurityWeek 2026-10-20

The Key to AI Software Security Isn’t Speed, It’s Maturity

7.8

Sonar Blog 2026-10-20

Google Gemini 4 Argon: An evaluation

7.8

Sonar Blog 2026-10-20

How to keep your architecture intact when agents write the code

7.8

Malwarebytes Labs 2026-10-20

Google may add your number to all your accounts: How to stop it

7.8

Infosecurity Magazine 2026-10-20

AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds

7.8

Sonatype Research 2026-10-20

The New Release Metric: Less Cleanup Per Release

7.8

Infosecurity Magazine 2026-10-20

Siemens Customers Targeted by ClickFix Attackers Exploiting DLL Side-Loading Flaw

7.8

Kaspersky Securelist 2026-10-20

The journey of a paper unicorn: adventures inside a modern warehouse

7.8

The Hacker News 2026-10-19

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

7.8

Rapid7 Blog 2026-10-19

Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in

7.8

Rapid7 Blog 2026-10-19

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)

7.8

SecurityWeek 2026-10-19

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

7.8

Infosecurity Magazine 2026-10-19

Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds

7.8

Rapid7 Blog 2026-10-19

Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

7.8

GitGuardian Blog 2026-10-19

Leaked API Keys in LLMs: How AI Agents Expose Secrets

7.8

Rapid7 Blog 2026-10-19

CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

7.8

Dark Reading 2026-10-19

OnlyFans Copyright Takedowns Expose Compromised Websites

7.8

Dark Reading 2026-10-19

The Evolving Cybersecurity Lexicon: Vulnerability Discovery to Resilience

7.8

SentinelOne Labs 2026-10-19

Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt

7.8

Cloudflare Blog 2026-10-19

Beyond the patch: Protecting your NetScaler gateway against future vulnerabilities

7.8

Microsoft Security Blog 2026-10-19

Agents are your newest insiders. Security must move at their speed.

7.8

The Hacker News 2026-10-19

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

7.8

Help Net Security 2026-10-19

With open-weight AI, more of the security burden falls on enterprises

7.8

Cybersecurity Dive 2026-10-19

Q-day is coming: How to prepare for post-quantum security challenges

8.2

The Hacker News 2026-10-19

Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

7.8

SecurityWeek 2026-10-18

US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars

7.8

Varonis Blog 2026-10-17

Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQL

7.8

Dark Reading 2026-10-16

BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

7.8

Dark Reading 2026-10-16

AI Takes Control of Robotic Arm in 16 Minutes Flat

8.2

The Hacker News 2026-10-16

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

7.8

Microsoft Security Blog 2026-10-16

Managing open-weight model risk in enterprise deployments

7.8

Cybersecurity Dive 2026-10-16

Open-source security rests on understanding risks, scaling fixes

7.8

Malwarebytes Labs 2026-10-16

Eiliko robot companion exposes private chats and can be hijacked

7.8

Cobalt Blog 2026-10-16

The Token Tax: Why AI Pentesting Gets Expensive Fast

8.0

Rapid7 Blog 2026-10-16

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

7.8

The Record by Recorded Future 2026-10-16

Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day

7.8

Infosecurity Magazine 2026-10-16

China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns

7.8

SecurityWeek 2026-10-16

F5, Juniper Networks Patch Critical Vulnerabilities

7.8

SecurityWeek 2026-10-16

Microsoft Patches Two Dozen RCE Flaws in Office

7.8

ZDI (Zero Day Initiative) 2026-10-16

ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-16

ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-16

ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-16

ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-16

ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-16

ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-16

ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

7.8

Cisco Talos 2026-10-15

The Q3 Vulnerability Pulse: Discovery ≠ Exploitation

7.8

SecurityWeek 2026-10-15

Context Is King in the Fight Against Modern Cyberattacks

7.8

Dark Reading 2026-10-15

Vulnerability Management Isn't About the Score — It's About How It Applies to You

7.8

Orca Security Blog 2026-10-15

Frontier-Level Red-Teaming From a Self-Hostable Open-Weight Model: Testing NVIDIA Nemotron 3.5 Super

7.8

Cybersecurity Dive 2026-10-15

Internet exposure of AI tools, ICS devices continues to grow

7.8

Malwarebytes Labs 2026-10-15

Update Chrome: Google fixes 37 security flaws, including seven critical bugs

7.8

Bishop Fox 2026-10-15

AI Security Scoping: Define What To Test In Your Deployment

7.8

Sonatype Research 2026-10-15

AI Noise Is the New Development Bottleneck

7.8

Infosecurity Magazine 2026-10-15

Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool

7.8

Malwarebytes Labs 2026-10-15

Raven AI lets cops find your home from a photo taken inside

7.8

Help Net Security 2026-10-15

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

7.8

SecLists / Daniel Miessler 2026-10-15

Custom Content for Everyone

7.8

SecLists / Daniel Miessler 2026-10-15

AGI Prediction Update (2025-2028)

7.8

SecurityWeek 2026-10-15

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

8.1

SecurityWeek 2026-10-15

Cisco Warns of Exploited Secure Email Gateway Vulnerability

7.8

Help Net Security 2026-10-15

The internet’s attack surface moves at very different speeds

7.8

Help Net Security 2026-10-15

AI-generated changes create review bottlenecks in software delivery

7.8

Snyk Blog 2026-10-15

VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?

7.8

Snyk Blog 2026-10-15

Introducing Evo Agentic AppSec: Security That Keeps Up With AI Development

7.8

Dark Reading 2026-10-14

Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

8.7

Orca Security Blog 2026-10-14

Critical GitLab RCE Lets Unauthenticated Attackers Execute Code on Servers (CVE-2026-97229)

7.8

Dark Reading 2026-10-14

Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat

7.8

CyberScoop 2026-10-14

Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities

7.8

Malwarebytes Labs 2026-10-14

AI worms could spread across your smart devices, Anthropic warns

7.8

Cybersecurity Dive 2026-10-14

Hacker targets Ivanti Connect Secure in chained exploitation

7.8

Rapid7 Blog 2026-10-14

From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

7.8

GitGuardian Blog 2026-10-14

Why We Built the Good Samaritan Program

7.8

Cloudflare Blog 2026-10-14

Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bug

7.8

Sonar Blog 2026-10-14

AI coding ROI is a throughput problem, and verification is how you solve it

7.8

Sonar Blog 2026-10-14

Sonar's new JS/TS engine: Tracing meaning, not syntax, to hunt down real vulnerabilities

7.8

Sonar Blog 2026-10-14

Which LLM writes the best code? A 2026 comparison

7.8

Sonar Blog 2026-10-14

Prioritize what's actually exploitable: Vulnerability reachability is now available in SonarQube Advanced Security

7.8

Rapid7 Blog 2026-10-14

Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce

7.8

Malwarebytes Labs 2026-10-14

Update Windows: Record Patch Tuesday fixes flaw already under attack

7.8

Trail of Bits Blog 2026-10-14

Package managers have an integrity problem

7.8

Help Net Security 2026-10-14

Chainguard Harness uses frontier AI to test running applications for vulnerabilities

7.8

Infosecurity Magazine 2026-10-14

Passkey Authentications Double but Adoption Remains Slow

8.0

Help Net Security 2026-10-14

Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances

7.8

Infosecurity Magazine 2026-10-14

Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs

7.8

Infosecurity Magazine 2026-10-14

Billion-Dollar Companies Twice as Likely to Leave Critical Vulnerabilities Unpatched

7.8

Krebs on Security 2026-10-13

Microsoft Patches More Than 1,400 Security Flaws

7.8

Orca Security Blog 2026-10-13

How to Apply Your Own Vulnerability Scoring in Orca with Custom Agents

7.8

Dark Reading 2026-10-13

Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday

7.8

CyberScoop 2026-10-13

Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day

7.8

Tenable Research 2026-10-13

Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

7.8

Cisco Talos 2026-10-13

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

7.8

Dark Reading 2026-10-13

Anthropic Finds Ingredients for Future AI Worms

7.8

SecurityWeek 2026-10-13

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

7.8

SecurityWeek 2026-10-13

Adobe Patches 140 Vulnerabilities Across 10 Products

7.8

The Record by Recorded Future 2026-10-13

Sandbox vulnerability gives rogue AI agents a path to escape and leak data, research says

7.8

Cybersecurity Dive 2026-10-13

Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud

7.8

Sonar Blog 2026-10-13

Acting on the AI Shift in Cyber Risk With Prevention at the Codebase Level

7.8

SecurityWeek 2026-10-13

Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns

7.8

SecurityWeek 2026-10-13

AI Turns Familiar Cyberattacks Into a Race Against Time

7.8

Infosecurity Magazine 2026-10-13

Fifth of CISOs Take Time Off to Avoid Patch Tuesday

7.8

ZDI (Zero Day Initiative) 2026-10-13

ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-13

ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-13

ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-13

ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-10-13

ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

7.8

CyberScoop 2026-10-12

Flock can now issue CVEs for its own products. Should we trust it?

7.8

Dark Reading 2026-10-12

Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

8.2

Cybersecurity Dive 2026-10-12

CISA calls on Citrix NetScaler customers to patch as new flaws disclosed

7.8

Cybersecurity Dive 2026-10-12

GitLab fixes critical vulnerability that exposed software environments to sabotage

7.8

SecurityWeek 2026-10-12

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

7.8

The Hacker News 2026-10-12

Bring Your Own Agent: Your Employees' Assistants Are Already Logged In

7.8

Detectify Blog 2026-10-12

How to detect non-CVE vulnerabilities that standard scanners miss

7.8

The Hacker News 2026-10-12

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

7.8

CyberScoop 2026-10-12

Your AI agent is only as safe as the packages it downloads

7.8

Infosecurity Magazine 2026-10-12

Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups

7.8

The Hacker News 2026-10-12

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

7.8

Cybersecurity Dive 2026-10-12

AI-driven security: Why agentic AI is changing cybersecurity

7.8

SecurityWeek 2026-10-12

Critical SonicWall Vulnerability Exploited Days After Disclosure

7.8

Help Net Security 2026-10-12

Windows PCs missing key updates could lose security fixes in 2027

7.8

Help Net Security 2026-10-12

AI vulnerability patching has a grading problem

7.8

Help Net Security 2026-10-11

Week in review: FortiBleed is still active, Patch Tuesday forecast

7.8

The Hacker News 2026-10-11

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

7.8

The Hacker News 2026-10-10

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

7.8

The Hacker News 2026-10-10

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

7.8

watchTowr Labs 2026-10-09

Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)

7.8

GitGuardian Blog 2026-10-09

AI Agent Security: Six Controls From Nine Real Incidents

7.8

Sonar Blog 2026-10-09

OpenAI GPT-6.1 Sol: An evaluation

7.8

Help Net Security 2026-10-09

High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring

7.8

Rapid7 Blog 2026-10-09

Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

7.8

SecurityWeek 2026-10-09

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

7.8

Help Net Security 2026-10-09

Anthropic offers free AI security scans to open-source maintainers

7.8

SecurityWeek 2026-10-09

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

7.8

SecurityWeek 2026-10-09

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

7.8

SecurityWeek 2026-10-09

Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own

7.8

Help Net Security 2026-10-09

October 2026 Patch Tuesday forecast: Time for an Office cleanup

7.8

Help Net Security 2026-10-09

Thousands of wind and solar park systems sit exposed on the internet across Europe

7.8

Help Net Security 2026-10-09

Companies want autonomous IT operations but hesitate to let AI act alone

7.8

SecurityWeek 2026-10-09

Formula Predicts When AI Chatbots Are at Risk of Turning Bad

7.8

SecLists / Daniel Miessler 2026-10-09

Harness Gardens

7.8

Imperva Research 2026-10-08

CVE-2026-21589: Critical Pre-Authentication File Read Affects Atlassian Data Center Products

7.8

CyberScoop 2026-10-08

Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software

7.8

Microsoft Security Blog 2026-10-08

Post-quantum authentication: Why organizations should start testing certificate ecosystems now

7.8

Dark Reading 2026-10-08

'AgentCorruption' Puts AWS Environments At Risk With Single Prompt

7.8

Sonatype Research 2026-10-08

Hijacked TensorLake npm Turned Install Into Credential Risk

8.0

SecurityWeek 2026-10-08

Cisco Patches a Dozen Critical Vulnerabilities

7.8

SecurityWeek 2026-10-08

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

7.8

SecurityWeek 2026-10-08

SonicWall and Splunk Patch Critical Vulnerabilities

7.8

Help Net Security 2026-10-08

Anthropic’s new budget model gets much better at ignoring hidden commands

7.8

Infosecurity Magazine 2026-10-08

Critical Flaw in Multiple Atlassian Products Exploited in the Wild

7.8

Sonatype Research 2026-10-08

Q3 2026 Open Source Malware Index: When Compromise Compounds

7.8

CyberScoop 2026-10-08

Quantum computers could break today’s encryption. Washington needs to prepare now.

7.8

Infosecurity Magazine 2026-10-08

Europol and US Spending Watchdog Sound the Alarm Over Quantum Threats

7.8

Imperva Research 2026-10-08

Is Your DDoS Protection Actually On?

7.8

CrowdStrike Research 2026-10-08

Solving the Continuous Authorization Conundrum

7.8

Dark Reading 2026-10-07

Anthropic Gives Vetted Defenders Fewer Claude Guardrails

8.0

Cisco Talos 2026-10-07

Microsoft, Adobe, Apple, and Foxit vulnerabilities

7.8

Orca Security Blog 2026-10-07

Critical Atlassian Path Traversal Exposes Sensitive Files Across 8 Products

7.8

Varonis Blog 2026-10-07

Least Privilege for AI Agents: A Practical Guide for Security Leaders

7.8

Microsoft Security Blog 2026-10-07

3 lessons from frontier AI vulnerability research

7.8

Cybersecurity Dive 2026-10-07

AI doesn’t change singular importance of phishing-resistant authentication, Okta says

7.8

Malwarebytes Labs 2026-10-07

Google issues Android security updates: who can get them and how

7.8

Rapid7 Blog 2026-10-07

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

7.8

SecurityWeek 2026-10-07

Chrome 155 Update Patches 247 Vulnerabilities

7.8

Malwarebytes Labs 2026-10-07

Update Chrome and ChromeOS to fix critical security issues

7.8

SecurityWeek 2026-10-07

Anthropic Introduces 3-Tier Cyber Verification Program for AI Access

7.8

Infosecurity Magazine 2026-10-07

Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One

7.8

SecurityWeek 2026-10-07

Android’s October 2026 Updates Patch 25 Vulnerabilities

7.8

SecurityWeek 2026-10-07

Atlassian Patches Critical Vulnerability Affecting 8 Products

7.8

Snyk Blog 2026-10-07

Frontier models found the vulnerabilities. Only the attacker found the chains.

7.8

Dark Reading 2026-10-06

Critical Healthcare Systems Aren't Quantum-Ready

7.8

Dark Reading 2026-10-06

Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps

7.8

Cloudflare Blog 2026-10-06

The keys to the Internet change on October 11. Are you ready?

7.8

PortSwigger Research 2026-10-06

The model isn't cooperating

7.8

watchTowr Labs 2026-10-06

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)

7.8

Dark Reading 2026-10-06

'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates

7.8

Microsoft Security Blog 2026-10-06

CISO perspectives on managing vulnerability risks in the age of AI

7.8

Cybersecurity Dive 2026-10-06

IBM’s AI-powered vulnerability clearinghouse finds hundreds of Java flaws

7.8

Tenable Research 2026-10-06

How to mitigate the risk from AI-generated apps built by your 'citizen coder' employees

7.8

Rapid7 Blog 2026-10-06

Securing Agent-to-Agent Communication: The Next Identity Frontier

7.8

Infosecurity Magazine 2026-10-06

Red Hat’s Lightwell Project Remediates 400 Open-Source Vulnerabilities

7.8

Bishop Fox 2026-10-06

Why the AI Attack Surface Extends Your Stack

7.8

Infosecurity Magazine 2026-10-06

Critical Medical Devices Unable to Support PQC Transition

7.8

The Hacker News 2026-10-06

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

7.8

SecurityWeek 2026-10-06

Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks

7.8

The Hacker News 2026-10-06

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

7.8

Sonatype Research 2026-10-06

What Are the New Rules for Secure Open Source Consumption?

7.8

Google Project Zero 2026-10-06

How to fix a bug in a fix

7.8

The Hacker News 2026-10-06

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

7.8

Imperva Research 2026-10-06

The Hidden DoS Vector in SQL Parsers

7.8

CrowdStrike Blog 2026-10-06

Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers

7.8

CyberScoop 2026-10-05

Citrix discloses third actively exploited NetScaler zero-day in less than a week

7.8

Orca Security Blog 2026-10-05

Citrix NetScaler Zero-Day Exploited in the Wild Crashes SAML Authentication Services

7.8

The Record by Recorded Future 2026-10-05

US, Australia warn of latest Citrix vulnerability after NetScaler advisory

8.3

The Hacker News 2026-10-05

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

7.8

PortSwigger Research 2026-10-05

Smashing the token limit with overlapping fragments

8.0

Help Net Security 2026-10-05

CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)

7.8

Cybersecurity Dive 2026-10-05

Citrix issues patch for third exploited flaw in NetScaler

7.8

The Hacker News 2026-10-05

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

7.8

Varonis Blog 2026-10-05

Access Governance: Reducing Attacker Reach in the Age of AI-Accelerated Threats

7.8

Infosecurity Magazine 2026-10-05

Citrix NetScaler Targeted Via New Zero Day

7.8

Dark Reading 2026-10-05

Need for Speed: AI-Driven Attacks Are Changing Security Strategies

7.8

Imperva Research 2026-10-05

Harvest Now, Decrypt Later: The Attack You Defend Against by Doing Nothing

7.8

The Hacker News 2026-10-05

The Credential Layer Is Expanding Faster Than Security Teams Can See It

7.8

SecurityWeek 2026-10-05

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI

7.8

The Hacker News 2026-10-05

Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access

7.8

Help Net Security 2026-10-05

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)

7.8

Help Net Security 2026-10-05

MAKERphone 2: A DIY 4G phone with plug-in camera, speaker and prototyping board

7.8

Cybersecurity Dive 2026-10-05

Modernizing data security with DSPM, AI and fewer tools

7.8

Cybersecurity Dive 2026-10-05

Why permissions must be the foundation for next-gen identity security

7.8

Help Net Security 2026-10-05

Apple tightens macOS disk access as AI agents become more powerful

7.8

The Hacker News 2026-10-05

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

8.1

The Hacker News 2026-10-05

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

7.8

SecurityWeek 2026-10-05

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

7.8

SecurityWeek 2026-10-03

Fortra Patches Critical Vulnerabilities in BoKS

7.8

The Hacker News 2026-10-03

The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations

7.8

JFrog Security Research 2026-10-02

The Year the Vulnerability Backlog Changed Shape

7.8

The Hacker News 2026-10-02

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

7.8

The Hacker News 2026-10-02

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

7.8

Dark Reading 2026-10-02

SWIFT Banking & Government Middleware Enables RCE

7.8

Dark Reading 2026-10-02

Is Your Organization Ready for 2027's AI Accountability Era?

7.8

Dark Reading 2026-10-02

Is It Fair to Blame 'Rogue' AI for Security Failures?

8.2

Cybersecurity Dive 2026-10-02

Fortinet warns that critical flaw in FortiMail is facing exploitation

7.8

Dark Reading 2026-10-02

Vulnerability Backlogs Are an Ownership Problem

7.8

Cloudflare Blog 2026-10-02

Updates on our pledge to make Cloudflare features accessible to everyone

7.8

Help Net Security 2026-10-02

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

7.8

SecurityWeek 2026-10-02

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

7.8

The Hacker News 2026-10-02

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

7.8

The Hacker News 2026-10-02

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

7.8

Help Net Security 2026-10-02

Android 17 makes it harder for spyware to cover its tracks

7.8

Help Net Security 2026-10-02

AI agents keep access to company data after their work is done

7.8

GitGuardian Blog 2026-10-01

Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders

8.0

Infosecurity Magazine 2026-10-01

Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation

7.8

Help Net Security 2026-10-01

Legit Security extends automated fixes to vulnerable open-source dependencies

8.7

Bishop Fox 2026-10-01

One Port to Root: Weaponizing Check Point Management CVE-2026-93616

7.8

Help Net Security 2026-10-01

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)

7.8

Infosecurity Magazine 2026-10-01

AI Threats Top Cybersecurity Preparedness Gap, PwC Finds

7.8

ZDI (Zero Day Initiative) 2026-10-01

ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

7.8

Snyk Blog 2026-10-01

Why AI Coding Agents Keep Writing Broken Access Control

7.8

CyberScoop 2026-09-30

OpenAI reveals ‘novel’ encryption bypass used in distillation attack

7.8

The Record by Recorded Future 2026-09-30

Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation

7.8

The Hacker News 2026-09-30

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

7.8

Cybersecurity Dive 2026-09-30

Mass exploitation of Citrix NetScaler: What we currently know

7.8

The Hacker News 2026-09-30

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

7.8

Rapid7 Blog 2026-09-30

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

7.8

GitGuardian Blog 2026-09-30

AI Agent Authorization Beyond Authentication: A Look At AWS Dogwood

7.8

Infosecurity Magazine 2026-09-30

AI-Found Vulnerabilities More Likely to Enable RCE, Google Says

8.0

Microsoft Security Blog 2026-09-30

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

7.8

Malwarebytes Labs 2026-09-30

Your car’s app could be telling Big Tech who you are and where you go

7.8

Infosecurity Magazine 2026-09-30

Apple Patches CoreGraphics Zero Day Exploited in Attacks

7.8

The Hacker News 2026-09-30

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

8.4

The Hacker News 2026-09-30

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

7.8

ZDI (Zero Day Initiative) 2026-09-30

ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-09-30

ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability

7.8

Snyk Blog 2026-09-30

What Is Agentic AppSec?

7.8

SecLists / Daniel Miessler 2026-09-29

AI State of the Union (October 2026)

7.8

Dark Reading 2026-09-29

Apple Zero-Day Vulnerability Weaponized in Targeted Attacks

7.8

Dark Reading 2026-09-29

Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution

7.8

The Hacker News 2026-09-29

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

7.8

SecurityWeek 2026-09-29

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

7.8

Orca Security Blog 2026-09-29

Critical Citrix NetScaler Zero-Days Under Active Exploitation

8.0

Cybersecurity Dive 2026-09-29

Citrix NetScaler exploitation began days before public notification

7.8

GitGuardian Blog 2026-09-29

Generative AI Security: Are Your Developers Pasting Secrets Into LLMs?

7.8

Orca Security Blog 2026-09-29

Amazing and Terrifying: Securing an App Built By AI in a Weekend

8.0

Help Net Security 2026-09-29

NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)

8.0

Dark Reading 2026-09-29

Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

7.8

The Hacker News 2026-09-29

Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown

8.1

Infosecurity Magazine 2026-09-29

Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials

7.8

watchTowr Labs 2026-09-29

Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

7.8

Cloudflare Blog 2026-09-29

Preventing quantum downgrade attacks against IPsec

7.8

Cloudflare Blog 2026-09-29

We tested our own WAF with frontier AI models. Here’s what we found

7.8

Cloudflare Blog 2026-09-29

Building a post-quantum certificate authority with Merkle Tree Certificates

7.8

Cloudflare Blog 2026-09-29

Building a certificate authority for the whole Internet

7.8

Cloudflare Blog 2026-09-29

Using AI to chart a course for our post-quantum migration

7.8

Sonar Blog 2026-09-29

How verification enables smarter model routing for AI coding

7.8

Sonar Blog 2026-09-29

How to achieve first-pass quality with AI coding agents

7.8

Sonar Blog 2026-09-29

The Acceptance Gap: Why AI-Generated Code Still Fails to Become Shipped Work

7.8

Bishop Fox 2026-09-29

Zilliz / Attu | 2.6.5

7.8

SecurityWeek 2026-09-29

Four Cyber Threats Harboring Big Plans for the Future

7.8

Help Net Security 2026-09-29

Cybersecurity hiring practices leave little room for junior talent

7.8

Malwarebytes Labs 2026-09-29

Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

7.8

Palo Alto Unit 42 2026-09-29

OperTraitors: How Kubernetes Operators Betray Your Security Posture

7.8

Sonatype Research 2026-09-29

How AI Changes the SDLC Beyond Faster Coding

7.8

Malwarebytes Labs 2026-09-29

Humans are reviewing Copilot users’ bizarre and abusive image-editing requests

7.8

Detectify Blog 2026-09-29

Detectify Cyber Hygiene Index Report reveals that most critical vulnerabilities sit unfixed for months

7.8

The Hacker News 2026-09-29

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

7.8

CyberScoop 2026-09-29

Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings

7.8

SecLists / Daniel Miessler 2026-09-28

College Is Not One Thing

7.8

Dark Reading 2026-09-28

One Packet Can Crash OT Servers in Industrial Sectors

7.8

The Hacker News 2026-09-28

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

7.8

Dark Reading 2026-09-28

AI Agents Are Privileged Users; Who Is Auditing Their Access?

7.8

The Hacker News 2026-09-28

IAM for AI agents: A Practical Enterprise Framework

8.1

Imperva Research 2026-09-28

New Remote DoS Attacks Against GraphQL Java

7.8

The Record by Recorded Future 2026-09-28

US, UK warn of exploited Citrix NetScaler zero-day bugs

8.1

Cybersecurity Dive 2026-09-28

Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts

7.8

Cybersecurity Dive 2026-09-28

Niche AI tools pose major cybersecurity risk to infrastructure operators

7.8

Palo Alto Unit 42 2026-09-28

Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

8.0

watchTowr Labs 2026-09-28

Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

7.8

Rapid7 Blog 2026-09-28

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

7.8

Infosecurity Magazine 2026-09-28

MCP Is Creating Major Governance Gaps, Researchers Warn

7.8

SecurityWeek 2026-09-28

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability

7.8

Cybersecurity Dive 2026-09-28

Your attack surface is bigger than you think… and hackers know that

7.8

Cybersecurity Dive 2026-09-28

Security testing has to keep pace with AI-driven attackers

7.8

Cybersecurity Dive 2026-09-28

Context matters when it comes to cybersecurity’s agentic operating model

7.8

Infosecurity Magazine 2026-09-28

Citrix Patches Critical Zero Days Under Active Exploitation

7.8

SecurityWeek 2026-09-28

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

7.8

The Hacker News 2026-09-28

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

8.2

Tenable Research 2026-09-27

Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities

8.0

SecurityWeek 2026-09-27

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

8.0

The Hacker News 2026-09-27

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

7.8

The Hacker News 2026-09-26

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

7.8

The Hacker News 2026-09-26

Zero Trust for AI Agents Starts With Fixing Zero Visibility

7.8

The Hacker News 2026-09-26

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

7.8

The Hacker News 2026-09-26

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

7.8

Palo Alto Unit 42 2026-09-25

3 Consulting Myths Debunked by Unit 42 Experts

7.8

Dark Reading 2026-09-25

AI Sandbox Escapes: Why Forensic Readiness Matters More Than Containment

7.8

Varonis Blog 2026-09-25

AI Security Fundamentals: The Real Industry Shift Taking Place

7.8

Imperva Research 2026-09-25

From Debugging to Code Execution: RCE in Microsoft DevLabs’ DebugMCP?

7.8

GitGuardian Blog 2026-09-25

AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP

8.2

Rapid7 Blog 2026-09-25

Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

7.8

Infosecurity Magazine 2026-09-25

Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk

7.8

Bishop Fox 2026-09-25

Master Key Included: Detecting SolarWinds ARM CVE-2026-28326

7.8

Trail of Bits Blog 2026-09-25

Don't let TEEs break your MPC

7.8

SecurityWeek 2026-09-25

Windows, Linux, Android File Notification Systems Leak User Activity

7.8

The Hacker News 2026-09-25

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

7.8

SecurityWeek 2026-09-25

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration

7.8

SecurityWeek 2026-09-25

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

7.8

The Hacker News 2026-09-25

Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data

7.8

The Hacker News 2026-09-25

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

7.8

Dark Reading 2026-09-24

'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

8.2

The Hacker News 2026-09-24

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

7.8

Cybersecurity Dive 2026-09-24

Wiz uses AI to find vulnerabilities in railroads, hospitals and other critical infrastructure

7.8

Cloudflare Blog 2026-09-24

How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers

7.8

Dark Reading 2026-09-24

Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

7.8

Rapid7 Blog 2026-09-24

When Business Email Compromise Starts Rewriting Reality

7.8

Bishop Fox 2026-09-24

Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications

7.8

Infosecurity Magazine 2026-09-24

CISA Charts New "Quality Era" for Global CVE Program

7.8

Help Net Security 2026-09-24

Meta locks itself out of user data on its AI glasses

7.8

Malwarebytes Labs 2026-09-24

Update Chrome: 108 security fixes for desktop, new release for Android

7.8

SecurityWeek 2026-09-24

OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators

7.8

The Hacker News 2026-09-24

Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore

7.8

SecurityWeek 2026-09-24

Begin at the End: How to Enable Agentic Remediation

7.8

SecurityWeek 2026-09-24

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted

7.8

Sonatype Research 2026-09-24

The New Engineering Problem: Managing What AI Decides to Import

8.0

The Hacker News 2026-09-24

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

7.8

Snyk Blog 2026-09-24

Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface

7.8

CyberScoop 2026-09-24

CISA outlines improvement plan for CVE program

7.8

watchTowr Labs 2026-09-23

Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

7.8

Dark Reading 2026-09-23

EDR Evasion Stack Helps Process Injection Slip Past Defenses

7.8

Dark Reading 2026-09-23

GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

7.8

Malwarebytes Labs 2026-09-23

How device code phishing gives scammers access to your account

7.8

Imperva Research 2026-09-23

OWASP LLM Top 10 2026: Every Move Points the Same Direction

7.8

Infosecurity Magazine 2026-09-23

Hundreds of Leaked GitHub App Keys Still Authenticate

7.8

Rapid7 Blog 2026-09-23

CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

7.8

Malwarebytes Labs 2026-09-22

Some cheap smart glasses are a security disaster

7.8

SecurityWeek 2026-09-22

Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity

7.8

GitGuardian Blog 2026-09-22

GitHub App Private Keys: 474 Leaked Keys Exposed

7.8

Sonar Blog 2026-09-22

Claude Opus 5.5: An evaluation review and metrics benchmarks

7.8

SecurityWeek 2026-09-22

Only 13% of OT Network Segments Are Fully Isolated: Analysis

7.8

Infosecurity Magazine 2026-09-22

Network Segmentation Failures Are Expanding the Corporate Attack Surface

7.8

Malwarebytes Labs 2026-09-22

Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

7.8

SecurityWeek 2026-09-22

WordPress Patches ‘Click2Shell’ Vulnerability

7.8

CyberScoop 2026-09-22

Another worry for water systems: infostealer exposure

7.8

Malwarebytes Labs 2026-09-22

Researchers used Claude to hack OpenAI

7.8

ZDI (Zero Day Initiative) 2026-09-22

ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability

7.8

Dark Reading 2026-09-21

How AI Agents Can Trigger Runaway Costs for Enterprises

7.8

Orca Security Blog 2026-09-21

Attack Surface Explained: Types & Reduction Tips

7.8

The Hacker News 2026-09-21

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

7.8

Trail of Bits Blog 2026-09-21

SAML: A fractal of bad design

7.8

Palo Alto Unit 42 2026-09-21

From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies

8.0

SecurityWeek 2026-09-21

Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities

7.8

Cybersecurity Dive 2026-09-21

More CVEs than ever. The same old ones keep getting exploited.

7.8

Cybersecurity Dive 2026-09-21

Security’s 30-year habit: layering around the problem

7.8

Google Project Zero 2026-09-21

Windows Exploitation Techniques: Dangling COM Object Registrations

7.8

The Hacker News 2026-09-19

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

7.8

The Hacker News 2026-09-19

Identity Visibility in 2026: The Foundation of Identity Security

7.8

The Hacker News 2026-09-19

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

7.8

The Hacker News 2026-09-19

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

7.8

The Hacker News 2026-09-19

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

8.1

Dark Reading 2026-09-18

Cisco Zero-Day Highlights API Endpoint Authentication Issues

7.8

Dark Reading 2026-09-18

EY Survey Finds Autonomous AI Implementation Outpaces Oversight

7.8

Dark Reading 2026-09-18

MFA Won't Save You From OAuth Consent Abuse

7.8

The Hacker News 2026-09-18

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

7.8

CyberScoop 2026-09-18

Researchers use AI to find widespread software decoder flaw

7.8

The Hacker News 2026-09-18

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

7.8

Cybersecurity Dive 2026-09-18

CISA ends weekly vulnerability roundups as part of shift to prioritization approach

7.8

SecurityWeek 2026-09-18

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

7.8

Malwarebytes Labs 2026-09-18

Did an AI really try to break free from human control?

7.8

Sonar Blog 2026-09-18

OpenAI GPT-6 Astra: An evaluation

7.8

The Hacker News 2026-09-18

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

7.8

SecurityWeek 2026-09-18

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code

7.8

The Hacker News 2026-09-18

An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.

7.8

The Hacker News 2026-09-18

Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents

7.8

Trail of Bits Blog 2026-09-18

Auditing in the age of (good enough) AI

8.0

SecurityWeek 2026-09-18

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

7.8

Palo Alto Unit 42 2026-09-18

A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity

7.8

Sonatype Research 2026-09-18

Why Are OSS Attackers Always After CI/CD Credentials?

7.8

Infosecurity Magazine 2026-09-18

CISA Upgrades Vulnerability Reporting Platform with More Automation

7.8

Help Net Security 2026-09-18

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

8.1

SecurityWeek 2026-09-18

Critical Orkes Conductor Vulnerability Exploited in Attacks

7.8

Help Net Security 2026-09-18

Android apps can now check security patches down to individual device components

8.3

SecurityWeek 2026-09-18

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

7.8

Help Net Security 2026-09-18

Abandoned IoT apps keep sending sensitive data to broken servers

7.8

Help Net Security 2026-09-18

Hardcoded MCP credentials found in public GitHub files

7.8

ZDI (Zero Day Initiative) 2026-09-18

ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-09-18

ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

8.0

ZDI (Zero Day Initiative) 2026-09-18

ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-09-18

ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

7.8

Dark Reading 2026-09-17

CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus

8.0

CyberScoop 2026-09-17

Cisco alerts customers to second actively exploited zero-day in as many days

7.8

CyberScoop 2026-09-17

The AI hacking apocalypse is not inevitable

7.8

Help Net Security 2026-09-17

Download: The IT leader’s guide to AI code sprawl

7.8

Bishop Fox 2026-09-17

MikroTrick: Inside the RouterOS Takeover Chain

7.8

The Hacker News 2026-09-17

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

7.8

The Hacker News 2026-09-17

Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar

8.0

Infosecurity Magazine 2026-09-17

Cisco Warns of Active Exploitation of Critical ISE Flaw

7.8

The Hacker News 2026-09-17

CISO's Expert Guide to Agentic Pentesting for Websites

7.8

Help Net Security 2026-09-17

Unauthenticated attackers are bypassing Cisco ISE’s management interface (CVE-2026-76460)

7.8

CyberScoop 2026-09-17

America’s cyber strategy overlooks the infrastructure that actually keeps the military moving

8.0

The Hacker News 2026-09-17

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

7.8

The Hacker News 2026-09-17

Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks

7.8

ZDI (Zero Day Initiative) 2026-09-17

ZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability

7.8

Cobalt Blog 2026-09-16

How Cobalt Brings Real-Time Exploit and Threat Intelligence to Vulnerability Findings

7.8

Dark Reading 2026-09-16

BragJack Attack Can Turn a Browser's Agentic AI Against It

8.2

Cybersecurity Dive 2026-09-16

Hackers exploit zero-day flaw in Cisco email gateway

7.8

Infosecurity Magazine 2026-09-16

PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug

7.8

SecurityWeek 2026-09-16

AIUC Raises $40 Million to Certify Enterprise AI Agents

7.8

SecurityWeek 2026-09-16

Pixel Modem Zero-Day Exploited in Targeted Attacks

7.8

Varonis Blog 2026-09-16

TrustSink: How a Rogue External MFA Provider Steals Passwords

7.8

SecurityWeek 2026-09-16

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

7.8

SecurityWeek 2026-09-16

Hackuity Raises $19 Million for AI-Powered Vulnerability Management

8.0

Malwarebytes Labs 2026-09-16

Google Pixel owners urged to patch actively exploited modem flaw

7.8

SecurityWeek 2026-09-16

Chrome, Firefox Updates Patch 115 Vulnerabilities

7.8

Cisco Talos 2026-09-16

Securing the unpatchable in an age of AI-driven vulnerabilities

7.8

Infosecurity Magazine 2026-09-16

Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping

7.8

Tenable Research 2026-09-15

Oracle September 2026 Critical Security Patch Update addresses 672 CVEs

8.0

Dark Reading 2026-09-15

Microsoft Issues Emergency Fixes After Massive Patch Tuesday

8.3

CyberScoop 2026-09-15

Cisco warns customers of actively exploited zero-day in email gateways

7.8

Rhino Security Labs 2026-09-15

Multiple Vulnerabilities in Frappe LMS Leading to Remote Code Execution

7.8

GitGuardian Blog 2026-09-15

AI Autonomy: How to Find the Autonomy Your Agents Already Have

7.8

Cybersecurity Dive 2026-09-15

Companies’ AI strategies don’t account for their agentic tools

7.8

Cloudflare Blog 2026-09-15

Give every teammate and agent the right level of access to your Workers

7.8

Rapid7 Blog 2026-09-15

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

7.8

SecurityWeek 2026-09-15

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases

7.8

Trail of Bits Blog 2026-09-15

1Password's AI patching benchmark is misleading

7.8

Sonatype Research 2026-09-15

Why AI Demands a New Approach to Shift Left

7.8

Infosecurity Magazine 2026-09-15

Microsoft Releases Emergency Patch to Fix RDS Vulnerability

7.8

The Hacker News 2026-09-15

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

8.7

The Hacker News 2026-09-15

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

7.8

Snyk Blog 2026-09-15

The AI Hurricane Is Here

7.8

Dark Reading 2026-09-14

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

7.8

The Hacker News 2026-09-14

New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

7.8

The Hacker News 2026-09-14

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

7.8

The Hacker News 2026-09-14

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

7.8

Cybersecurity Dive 2026-09-14

Malicious actors already using critical GitLab flaw, CISA and others warn

7.8

Orca Security Blog 2026-09-14

Breaking: GitLab Critical Path Traversal Flaw Exploited in the Wild — Patch Immediately

7.8

Malwarebytes Labs 2026-09-14

Google’s new search redirects make links harder to check before you click

7.8

Infosecurity Magazine 2026-09-14

Human Attacker Hits Machine-Speed Exploitation of Marimo RCE

7.8

SecurityWeek 2026-09-14

The Race to Control AI and Protect What Makes Us Human

7.8

Sonar Blog 2026-09-14

Sonar Supports OpenAI’s Call for Collective Action on Cyber Defense

7.8

Sonar Blog 2026-09-14

AGENTS.md is a workaround, not a solution

7.8

Sonar Blog 2026-09-14

Your AI agent doesn't know your codebase's context or constraints, and that's costing you

7.8

The Hacker News 2026-09-14

AI Changed the Exposure Problem. Validation Needs to Change With It.

7.8

SecurityWeek 2026-09-14

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution

7.8

Rapid7 Blog 2026-09-14

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

8.3

Infosecurity Magazine 2026-09-14

Hackers Exploit Maximum Severity Flaw in GitLab

7.8

SecurityWeek 2026-09-14

Three JFrog Artifactory Flaws Exploited for Backdoor Deployment

7.8

Cybersecurity Dive 2026-09-14

Zero trust is the future. But enterprises still need their VPNs.

7.8

SecurityWeek 2026-09-14

ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks

7.8

The Hacker News 2026-09-12

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

8.3

CyberScoop 2026-09-11

GitLab’s critical flaw is already drawing internet-wide probes

7.8

The Hacker News 2026-09-11

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

8.1

SecurityWeek 2026-09-11

GitLab Vulnerability Exploited One Day After Disclosure

7.8

SecurityWeek 2026-09-11

In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review

7.8

Rapid7 Blog 2026-09-11

Metasploit Wrap Up: This One Goes to Sixteen!

7.8

Sonar Blog 2026-09-11

Beyond cheap code: Engineering challenges and the need for verification

7.8

Bishop Fox 2026-09-11

CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key

7.8

The Hacker News 2026-09-11

Your Critical Vulnerabilities Might Not Be Your Biggest Risk

7.8

SecurityWeek 2026-09-11

Check Point Patches Critical VPN Vulnerabilities

7.8

Infosecurity Magazine 2026-09-11

Most Organizations Skip Permissions Reviews Before Deploying AI Tools

7.8

Help Net Security 2026-09-11

Automox Mitigation Worklets cut endpoint exposure to unpatchable flaws

7.8

The Hacker News 2026-09-11

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

7.8

The Hacker News 2026-09-11

PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

7.8

Help Net Security 2026-09-11

Getting a stranger’s phone kicked off the cellular network costs a few dollars

7.8

Help Net Security 2026-09-11

AI is changing what Salesforce security needs to govern

7.8

Help Net Security 2026-09-11

Ubuntu 24.04.5 LTS release patches security bugs across ten flavors

7.8

Imperva Research 2026-09-10

Imperva Customers Protected Against StyleSmuggler (CVE-2026-75650) in Adobe Commerce and Magento Open Source

7.8

Sonatype Research 2026-09-10

Reduce AI Token Waste by Getting Decisions Right Earlier

7.8

Dark Reading 2026-09-10

Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit

7.8

Mend (WhiteSource) Blog 2026-09-10

Detection scaled. The loop did not.

7.8

Cloudflare Blog 2026-09-10

1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it

7.8

Bishop Fox 2026-09-10

Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490

7.8

Malwarebytes Labs 2026-09-10

Will AI kill us all within the next decade?

7.8

The Hacker News 2026-09-10

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

7.8

Help Net Security 2026-09-10

Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)

8.0

Malwarebytes Labs 2026-09-10

Update Chrome now to protect against an actively exploited vulnerability

8.0

The Hacker News 2026-09-10

CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline

7.8

Help Net Security 2026-09-10

WordPress adds automated security checks to block risky plugin releases

7.8

Palo Alto Unit 42 2026-09-10

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE

7.8

The Hacker News 2026-09-10

Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

7.8

SecLists / Daniel Miessler 2026-09-10

The Boring Way to Get to AI Taking Over Everything

7.8

Snyk Blog 2026-09-10

Is prevention essentially a solved problem?

7.8

Microsoft Security Blog 2026-09-09

Threat matrix: Mapping threats across cloud web applications

7.8

Dark Reading 2026-09-09

Mythos Vulnerability Firehose Hits a Human Bottleneck

7.8

SecurityWeek 2026-09-09

Android’s September 2026 Updates Patch 180 Vulnerabilities

7.8

SecurityWeek 2026-09-09

Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories

7.8

Cisco Talos 2026-09-09

Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

7.8

Cybersecurity Dive 2026-09-09

CISOs are feeling the security burden of accelerated AI use

7.8

Infosecurity Magazine 2026-09-09

Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls

7.8

Dark Reading 2026-09-09

Identity-Based AI Attack Threatens Security of Enterprise Data

7.8

SecurityWeek 2026-09-09

Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension

7.8

SecurityWeek 2026-09-09

Meta Launches Personal AI Agent, Muse, Emphasizes Safety and Privacy

7.8

Help Net Security 2026-09-09

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory

7.8

Trail of Bits Blog 2026-09-09

A “proof” of Fermat’s Last Theorem that fits the margin

7.8

SecurityWeek 2026-09-09

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws

8.0

SecurityWeek 2026-09-09

Ivanti Patches Critical Flaws Across Enterprise Security Products

7.8

Malwarebytes Labs 2026-09-09

Microsoft fixes record 964 flaws, including 2 exploited zero-days

7.8

SecurityWeek 2026-09-09

This Key Will Self-Destruct: An Open Standard for Revocable API Keys

8.0

Infosecurity Magazine 2026-09-09

Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026

7.8

Help Net Security 2026-09-09

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

8.0

Infosecurity Magazine 2026-09-09

SAP Patches Maximum Severity “Overpass” Flaw

7.8

Help Net Security 2026-09-09

Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)

7.8

Sonatype Research 2026-09-09

Optimising Out the Waste in Open Source Publishing

7.8

CyberScoop 2026-09-08

Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

8.1

The Record by Recorded Future 2026-09-08

Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited

7.8

Cisco Talos 2026-09-08

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

7.8

Krebs on Security 2026-09-08

Microsoft Plugs Nearly 1,000 Security Holes

8.0

Dark Reading 2026-09-08

Patch Tuesday Sets Another Record With 974 CVEs

7.8

CyberScoop 2026-09-08

Why federal cyber defense demands an offense-driven mindset

7.8

Tenable Research 2026-09-08

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

7.8

Orca Security Blog 2026-09-08

What is Cloud Security?

7.8

Cybersecurity Dive 2026-09-08

N-able issues patch for zero-day flaw

7.8

GitGuardian Blog 2026-09-08

Service Account Credential Rotation: The Blast-Radius Checklist

7.8

Tenable Research 2026-09-08

StyleSmuggler (CVE-2026-75650): Frequently asked questions about Adobe Commerce and Magento zero-day

7.8

Cloudflare Blog 2026-09-08

Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)

7.8

Sonar Blog 2026-09-08

The next State of Code developer survey is open

7.8

Malwarebytes Labs 2026-09-08

MikroTik router flaws allow takeover without a password

7.8

Cybersecurity Dive 2026-09-08

Essential AI agent security questions

7.8

Google Project Zero 2026-09-08

Testing race conditions with memory access tracing and stack-based delay injection

7.8

ZDI (Zero Day Initiative) 2026-09-08

ZDI-26-616: Koha Eval Code Injection Remote Code Execution Vulnerability

8.0

ZDI (Zero Day Initiative) 2026-09-08

ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-09-08

ZDI-26-618: Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-09-08

ZDI-26-619: Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-09-08

ZDI-26-620: Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-09-08

ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability

8.2

ZDI (Zero Day Initiative) 2026-09-08

ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability

7.8

SecLists / Daniel Miessler 2026-09-08

Humans Aren't Aligned Either

7.8

GitGuardian Blog 2026-09-07

AI Created a Leaked Credentials Flood: Here's How We're Draining It

7.8

Help Net Security 2026-09-07

Hackers exploit RouterOS flaws to hijack MikroTik devices without authentication

7.8

Infosecurity Magazine 2026-09-07

NCSC Warns Shadow AI Creates New Security Risks

7.8

Malwarebytes Labs 2026-09-07

LG TV flaws could let attackers listen in, even in standby mode

7.8

Infosecurity Magazine 2026-09-07

N-able Releases Hotfix for Critical Remote Code Execution Vulnerability

7.8

SecurityWeek 2026-09-07

Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits

7.8

Help Net Security 2026-09-07

N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)

7.8

The Hacker News 2026-09-07

Your Cloud Security Checklist Doesn't Work the Way You Think It Does

7.8

The Hacker News 2026-09-07

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

7.8

The Hacker News 2026-09-07

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

7.8

Infosecurity Magazine 2026-09-07

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

7.8

Help Net Security 2026-09-07

Zero trust AI agents demand a different kind of security

7.8

The Hacker News 2026-09-06

Attackers Hijack MikroTik Routers Through Internet-Exposed SSH Without Authentication

7.8

The Hacker News 2026-09-05

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

7.8

The Hacker News 2026-09-05

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

7.8

SecurityWeek 2026-09-05

Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites

7.8

Microsoft Security Blog 2026-09-04

How to secure edge AI in customer-owned environments

7.8

SecLists / Daniel Miessler 2026-09-04

Cliff's Notes for Everything

7.8

SecurityWeek 2026-09-04

HPE Patches Critical RCE Vulnerabilities in AOS-CX

7.8

Dark Reading 2026-09-04

Companies Have 6 Months to Prepare for Automated Attacks

7.8

The Hacker News 2026-09-04

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

7.8

SecurityWeek 2026-09-04

Sangoma Switchvox Vulnerabilities Exploited in the Wild

7.8

Dark Reading 2026-09-04

AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?

7.8

Help Net Security 2026-09-04

Google patches actively exploited Chrome zero-day (CVE-2026-85046)

8.0

SecurityWeek 2026-09-04

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

7.8

SecurityWeek 2026-09-04

VMware Workstation and Fusion Updates Patch Critical Vulnerability

7.8

SecurityWeek 2026-09-04

Google Patches 6th Chrome Zero-Day of 2026

7.8

CyberScoop 2026-09-04

Why judgment is emerging as cybersecurity’s defining skill

7.8

The Hacker News 2026-09-04

Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws

7.8

Help Net Security 2026-09-04

Microsoft Teams is about to make QR code phishing much harder

7.8

The Hacker News 2026-09-04

Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws

8.1

The Hacker News 2026-09-04

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

7.8

The Hacker News 2026-09-04

GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

7.8

Help Net Security 2026-09-04

September 2026 Patch Tuesday forecast: All we need is more time

7.8

Help Net Security 2026-09-04

A five-part inventory for your AI agent credentials

7.8

Help Net Security 2026-09-04

Most of the bugs Claude Mythos found have never been checked by a human

7.8

SecLists / Daniel Miessler 2026-09-04

Peak Human Readership

8.0

CyberScoop 2026-09-03

Attackers exploit zero-days in consistently besieged SonicWall product

7.8

Cloudflare Blog 2026-09-03

Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models

7.8

The Hacker News 2026-09-03

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

7.8

Cybersecurity Dive 2026-09-03

SonicWall urges immediate patching of chained vulnerabilities

7.8

Bishop Fox 2026-09-03

Signature Optional - Analysis of CVE-2026-28323

7.8

SecurityWeek 2026-09-03

Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability

7.8

SecurityWeek 2026-09-03

Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities

7.8

Help Net Security 2026-09-03

Your AI agent’s system prompt is not a security control

7.8

Help Net Security 2026-09-03

Seemplicity Response Options accelerates vulnerability mitigation

7.8

The Hacker News 2026-09-03

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

7.8

The Hacker News 2026-09-03

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

7.8

Help Net Security 2026-09-03

Windows memory integrity switches on automatically for eligible devices in October 2026

7.8

Dark Reading 2026-09-02

AI’s Vulnerability Surge May Be More Manageable Than First Feared

7.8

Dark Reading 2026-09-02

SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE

7.8

Rapid7 Blog 2026-09-02

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

7.8

GitGuardian Blog 2026-09-02

OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome

7.8

Help Net Security 2026-09-02

Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)

7.8

Help Net Security 2026-09-02

Exploitation of Sangoma Switchvox flaw is underway (CVE-2026-9586)

7.8

SecurityWeek 2026-09-02

Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products

7.8

SecurityWeek 2026-09-02

Exploit Published for Fresh Cleo Harmony Vulnerability

7.8

Malwarebytes Labs 2026-09-02

Two critical Chrome flaws put users at risk on malicious websites

8.4

SecurityWeek 2026-09-02

OpenAI’s Astra Crosses ‘Critical’ Cyber Threshold After Finding Zero-Days

7.8

Help Net Security 2026-09-02

SonicWall SMA 1000 appliances under attack via zero-day flaws

7.8

SecurityWeek 2026-09-02

Chrome and Firefox Updates Patch Dozens of Vulnerabilities

7.8

Help Net Security 2026-09-02

A battery storage cyberattack would look exactly like a badly tuned controller

7.8

Infosecurity Magazine 2026-09-02

Hackers Chain Two New SonicWall Zero-Day Vulnerabilities

7.8

SecurityWeek 2026-09-02

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks

7.8

CrowdStrike Research 2026-09-02

CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks

7.8

Dark Reading 2026-09-01

Attackers Pounce on Critical Artifactory Flaw Following Disclosure

7.8

Dark Reading 2026-09-01

Critical Langflow Flaw Exploited as Attacks on AI Platform Rise

7.8

The Hacker News 2026-09-01

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

7.8

Cybersecurity Dive 2026-09-01

Security policies fail to keep up with a hybrid cloud world

7.8

Help Net Security 2026-09-01

CISA review makes the case for eliminating vulnerability classes

7.8

Cybersecurity Dive 2026-09-01

Frontier AI used to help exploit flaws in key industrial devices

7.8

GitGuardian Blog 2026-09-01

Credential Security: What Endpoint Protection Really Means for Secrets

7.8

Infosecurity Magazine 2026-09-01

65% of Enterprises Have Seen AI Agents Act Out of Scope

7.8

SecurityWeek 2026-09-01

Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars

7.8

SecurityWeek 2026-09-01

Hackers Start Exploiting Critical Langflow Vulnerability

7.8

SecurityWeek 2026-09-01

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

7.8

SecurityWeek 2026-09-01

WatchGuard Patches Critical Vulnerabilities

7.8

The Hacker News 2026-09-01

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

7.8

Help Net Security 2026-09-01

What your vendor says about PQC tells you if they are ready

7.8

Cybersecurity Dive 2026-08-31

PaperCut issues emergency patches as threat actors target chained vulnerabilities

7.8

GitGuardian Blog 2026-08-31

AWS S3 Bucket Security: Find the Secrets Hiding Outside Git

7.8

SecurityWeek 2026-08-31

Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit

7.8

SecurityWeek 2026-08-31

ServiceNow Patches 3 Critical Code Injection Vulnerabilities

7.8

Bishop Fox 2026-08-31

Traefik | Version Through 3.7.11

7.8

The Hacker News 2026-08-31

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

7.8

SecurityWeek 2026-08-31

Critical Ruby on Rails Vulnerability in Attackers’ Crosshairs

7.8

ZDI (Zero Day Initiative) 2026-08-31

ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-31

ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-31

ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-31

ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-31

ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

7.8

The Hacker News 2026-08-29

Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE

7.8

Palo Alto Unit 42 2026-08-28

Perturbation Probing: A New Diagnostic for the Fragility of LLM Safety

7.8

The Record by Recorded Future 2026-08-28

PaperCut warns of hackers using printer management software flaw in attacks

7.8

Cybersecurity Dive 2026-08-28

Frontier AI tipping the scales toward cyber adversaries

7.8

Rapid7 Blog 2026-08-28

Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

7.8

Tenable Research 2026-08-28

Why a cryptographic inventory is key for addressing the quantum computing threat

7.8

SecurityWeek 2026-08-28

Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says

7.8

Rapid7 Blog 2026-08-28

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

7.8

Help Net Security 2026-08-28

Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping

8.3

SecurityWeek 2026-08-28

PaperCut Releases Emergency Patch for Exploited Zero-Day

7.8

Help Net Security 2026-08-28

What 90 days and a small budget can buy in AI agent security

7.8

Dark Reading 2026-08-27

Chinese Routers Sold Worldwide Contain Backdoors

7.8

Cisco Talos 2026-08-27

“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend

7.8

Orca Security Blog 2026-08-27

Vulnerability Prioritization: Modern Methods & Tools

7.8

GitGuardian Blog 2026-08-27

AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection

7.8

Infosecurity Magazine 2026-08-27

CISA Warns of Six Exploited Flaws in Microsoft, Linux, Red Hat and Citrix Products

7.8

Cisco Talos 2026-08-27

JavaScript obfuscation: From party trick to phishing kit

7.8

Sonatype Research 2026-08-27

The AI Productivity Paradox: More Code, Not More Delivery

7.8

SecurityWeek 2026-08-27

The Future of AI-Driven Security Depends on Complete Data

8.0

SecurityWeek 2026-08-27

Recent Citrix NetScaler Vulnerability Exploited in the Wild

7.8

Sonatype Research 2026-08-27

A Reported Log4j RCE Is More Complicated Than It Looks

8.0

CyberScoop 2026-08-26

Three 10.0 security flaws fixed across Ubiquiti’s UniFi line

7.8

Malwarebytes Labs 2026-08-26

Update Chrome before you browse again

7.8

Tenable Research 2026-08-26

Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeter

8.0

Infosecurity Magazine 2026-08-26

Four in Five AI Tools Run with No IT Oversight, New Research Finds

7.8

Bishop Fox 2026-08-26

A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console

7.8

SentinelOne Labs 2026-08-26

Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who’s Exploiting Your Perimeter

7.8

SecurityWeek 2026-08-26

Adobe and Nvidia Patch Dozens of Vulnerabilities

7.8

Trail of Bits Blog 2026-08-26

VMs won't contain cyber-capable agents

7.8

SecurityWeek 2026-08-26

The MFA Identity Trap: When Authentication Creates a False Sense of Security

8.0

Help Net Security 2026-08-26

Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)

7.8

Kaspersky Securelist 2026-08-26

Exploits and vulnerabilities in Q2 2026

7.8

SecurityWeek 2026-08-26

Chrome 152 Patches Over 300 Vulnerabilities

8.3

SecurityWeek 2026-08-26

CISA Warns of Exploited Gitea Vulnerability

7.8

Help Net Security 2026-08-26

AI vulnerability discovery scores the highest impact of 20 emerging risks

7.8

Snyk Blog 2026-08-26

Why Your AI Application Is Exposed Snyk

7.8

Dark Reading 2026-08-25

Hidden Prompts Trick AI Into False Email Summaries

7.8

Dark Reading 2026-08-25

Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw

7.8

Microsoft Security Blog 2026-08-25

The patch window is collapsing: Why security needs a new control plane

7.8

Cybersecurity Dive 2026-08-25

Researchers warn about chained SharePoint sequence

7.8

Cybersecurity Dive 2026-08-25

CISA orders agencies to fix exploited Zimbra vulnerability

7.8

GitGuardian Blog 2026-08-25

Agentic AI Security: Credentials and Permissions Define the Blast Radius

7.8

PortSwigger Research 2026-08-25

What's in a tag name? JavaScript, apparently

7.8

SecurityWeek 2026-08-25

WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities

7.8

JFrog Security Research 2026-08-25

Coding Agents Just Reopened Your Software Supply Chain Blind Spot

7.8

Malwarebytes Labs 2026-08-25

Grok fooled into stealing user chat, location data, and more

7.8

Infosecurity Magazine 2026-08-25

Australia Warns of Active Exploitation of Critical TeamCity Server Flaw

7.8

Trail of Bits Blog 2026-08-25

State divergence enables unauthorized access

8.3

Help Net Security 2026-08-25

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks

7.8

Cisco Talos 2026-08-25

The safety penalty: Reclaiming operational sovereignty in the age of AI

7.8

Sonatype Research 2026-08-25

Why Financial Services Is the Canary in the Code Mine

7.8

SecurityWeek 2026-08-25

Silent Patches Don’t Stop Attackers – They Blind Defenders

7.8

SecurityWeek 2026-08-25

CISA Warns of Exploited Oracle WebLogic Vulnerability

8.0

Dark Reading 2026-08-24

Exploited Zimbra Flaw Highlights Shrinking Window to Patch

8.0

Rapid7 Blog 2026-08-24

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

7.8

Infosecurity Magazine 2026-08-24

New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims

7.8

JFrog Security Research 2026-08-24

Agent Immunization: A New Model for Building Trusted AI Agents

7.8

Infosecurity Magazine 2026-08-24

NIST Warns of Unique Security Risks in Multi-Cloud Environments

7.8

Dark Reading 2026-08-24

The Vulnerability Gap: Why Discovery Is Outrunning Repair

7.8

JFrog Security Research 2026-08-24

Why Self-Healing Is the Only Way to Secure at Frontier AI Speed

7.8

SecurityWeek 2026-08-24

91 Vulnerabilities Patched in Spring Application Framework

8.0

The Hacker News 2026-08-24

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

7.8

The Hacker News 2026-08-24

The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

7.8

SecurityWeek 2026-08-24

Rethinking Application Security for the AI Era

7.8

Cybersecurity Dive 2026-08-24

Salesforce gave every org the same free scanner. Attackers already know what it misses.

7.8

Infosecurity Magazine 2026-08-24

Researchers Uncover Thousands of Leaked AWS Keys

7.8

Help Net Security 2026-08-24

Product showcase: AI Paper Trail shows the privacy cost of talking to AI

7.8

Troy Hunt 2026-08-24

Weekly Update 518: IoT Doorlock Nirvana with UniFi

7.8

Palo Alto Unit 42 2026-08-21

Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain

8.0

Sonatype Research 2026-08-21

91 Spring CVEs: The AI Vulnerability Consumption Problem

7.8

Varonis Blog 2026-08-21

3 Takeaways from Forrester’s 2026 Data Security Platforms Landscape Report

7.8

Dark Reading 2026-08-21

OWASP Flags Top AI Skill Risks in New Security Blueprint

7.8

JFrog Security Research 2026-08-21

Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory

7.8

The Hacker News 2026-08-21

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

7.8

Cybersecurity Dive 2026-08-21

Microsoft confirms maximum severity flaw in Entra ID targeted for exploitation

8.0

SecurityWeek 2026-08-21

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

7.8

Malwarebytes Labs 2026-08-21

Zombie Card: An expired Visa credit card can be used for purchases

7.8

Bishop Fox 2026-08-21

No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452

7.8

SecurityWeek 2026-08-21

Critical Isolated-vm Vulnerability Leads to RCE on Host

7.8

Help Net Security 2026-08-21

Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)

7.8

The Hacker News 2026-08-21

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

7.8

SecurityWeek 2026-08-21

Microsoft Patches Exploited Entra ID Vulnerability

8.0

Help Net Security 2026-08-21

Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)

8.0

The Hacker News 2026-08-21

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

7.8

The Hacker News 2026-08-21

Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution

7.8

Help Net Security 2026-08-21

Nearly half of enterprises have no one leading PQC migration

7.8

Dark Reading 2026-08-20

N-able Bug Exposes Password Vault Master Keys

7.8

Cloudflare Blog 2026-08-20

From all-or-nothing to task-based OAuth consent

7.8

SecurityWeek 2026-08-20

Hackers Target Zimbra Servers in Active Exploitation Campaign

7.8

SecurityWeek 2026-08-20

Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities

7.8

SecurityWeek 2026-08-20

MLflow Vulnerability Exploited for Cloud Credential Theft

7.8

SecurityWeek 2026-08-20

Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities

7.8

SecurityWeek 2026-08-20

Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler

7.8

SecurityWeek 2026-08-20

Critical GitLab Flaw Exploited Shortly After Disclosure

7.8

The Hacker News 2026-08-19

Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

7.8

Cloudflare Blog 2026-08-19

A revisit of remote Spectre attacks on Cloudflare Workers

7.8

The Hacker News 2026-08-19

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

7.8

SecurityWeek 2026-08-19

CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities

7.8

SecurityWeek 2026-08-19

943 Patches Rolled Out With Oracle’s August 2026 Security Update

7.8

Help Net Security 2026-08-19

Google’s AI security agents found 100+ critical software vulnerabilities in just two days

7.8

Detectify Blog 2026-08-19

Shadow IT Security and why visibility beats another approval process

7.8

SecurityWeek 2026-08-19

Chrome, Firefox Updates Patch Dozens of Vulnerabilities

7.8

Help Net Security 2026-08-19

ChatGPT’s new feature could give infostealers a map of your Mac activity

7.8

Dark Reading 2026-08-18

Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

7.8

Dark Reading 2026-08-18

'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture

7.8

The Hacker News 2026-08-18

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps

7.8

The Hacker News 2026-08-18

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

7.8

GitGuardian Blog 2026-08-18

Why Secrets Slip Through Every Layer of Your Security Stack

7.8

Cloudflare Blog 2026-08-18

BGP Role model: tracking the adoption of RFC 9234

7.8

SecurityWeek 2026-08-18

AI-Driven Vulnerability Surge Breaks the Traditional Patching Model

7.8

The Hacker News 2026-08-18

AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files

7.8

SecurityWeek 2026-08-18

300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw

7.8

SecurityWeek 2026-08-18

GitLab Patches Critical Code Injection Vulnerability

8.0

SecurityWeek 2026-08-18

Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates

7.8

The Hacker News 2026-08-18

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

7.8

Dark Reading 2026-08-17

Video Call Exploit Chains Two Flaws in Unisoc Modems

7.8

The Hacker News 2026-08-17

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

7.8

The Hacker News 2026-08-17

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

7.8

The Hacker News 2026-08-17

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

7.8

Help Net Security 2026-08-17

Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer

7.8

The Hacker News 2026-08-17

How MCP Servers Can Expose Enterprise Secrets

7.8

SecurityWeek 2026-08-17

Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware

8.0

The Hacker News 2026-08-17

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

7.8

SecurityWeek 2026-08-17

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

7.8

SecurityWeek 2026-08-17

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

7.8

Help Net Security 2026-08-17

Windows 11’s strongest security defenses can be bypassed without a screwdriver

7.8

Dark Reading 2026-08-14

Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI

7.8

Cloudflare Blog 2026-08-14

How Cloudflare detects MCP traffic and helps secure it

7.8

MDSec Research 2026-08-14

ARM64 stack internals and obfuscation on Apple Silicon

7.8

watchTowr Labs 2026-08-14

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))

7.8

SecurityWeek 2026-08-14

Hackers Exploiting Unpatched GeoServer Zero-Day

7.8

Help Net Security 2026-08-14

Weak IAM affects up to 98% of cloud environments

7.8

Dark Reading 2026-08-13

Global Threat Campaign Hits Critical VMware vCenter Flaw

7.8

CyberScoop 2026-08-13

AI’s ‘middle class’ has gotten dramatically better at hacking

7.8

GitGuardian Blog 2026-08-13

Your AI Agents Are Using Your Credentials

7.8

SecurityWeek 2026-08-13

Adobe Commerce Bug Targeted Immediately After Disclosure

7.8

Help Net Security 2026-08-13

Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)

7.8

SecurityWeek 2026-08-13

WordPress 7.0.4 Patches Remote Code Execution Vulnerability

7.8

SecurityWeek 2026-08-13

Fortinet Patches Authentication Flaws in FortiWeb and FortiManager

7.8

SecurityWeek 2026-08-13

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’

7.8

Help Net Security 2026-08-13

Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)

7.8

Dark Reading 2026-08-13

Belgium's eID Authentication Opens Citizen Accounts to RCE

7.8

The Hacker News 2026-08-13

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

7.8

Orca Security Blog 2026-08-12

Zoom Zero-Click RCE Flaws Allow Any Meeting Attendee to Compromise All Participants

7.8

SecurityWeek 2026-08-12

SharePoint Vulnerability Exploited Shortly After PoC Release

8.0

The Record by Recorded Future 2026-08-12

Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery

7.8

The Hacker News 2026-08-12

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning

7.8

The Hacker News 2026-08-12

Enterprise Defenses Recovered at the Edge and Collapsed Inside

7.8

The Hacker News 2026-08-12

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

7.8

SecurityWeek 2026-08-12

Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined

8.0

Help Net Security 2026-08-12

Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820)

7.8

Help Net Security 2026-08-12

CBTS brings continuous penetration testing to enterprise security

7.8

SecurityWeek 2026-08-12

Ivanti EPM Update Patches Remotely Exploitable Flaws

7.8

SecurityWeek 2026-08-12

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact

7.8

The Hacker News 2026-08-12

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

7.8

The Hacker News 2026-08-12

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

7.8

The Hacker News 2026-08-12

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

7.8

ZDI (Zero Day Initiative) 2026-08-12

ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-12

ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-12

ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability

8.0

ZDI (Zero Day Initiative) 2026-08-12

ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

8.0

ZDI (Zero Day Initiative) 2026-08-12

ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-12

ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-12

ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability

7.8

Cisco Talos 2026-08-11

Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities

8.0

Dark Reading 2026-08-11

Microsoft's Patch Tuesday Deluge Continues With August Updates

8.0

Krebs on Security 2026-08-11

Microsoft Plugs Nearly 400 Security Holes

7.8

Trail of Bits Blog 2026-08-11

How Trail of Bits helps verify the integrity of your Signal chats

7.8

CyberScoop 2026-08-11

NIST wants to overhaul its vulnerability database for the AI age

7.8

GitGuardian Blog 2026-08-11

Vault Coverage Is the Missing Metric in NHI Programs

7.8

Dark Reading 2026-08-10

'GhostJacking' Exposes Identity Governance Gaps in AI Agents

7.8

Dark Reading 2026-08-10

Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius

7.8

CyberScoop 2026-08-10

NATO and an AI startup can now name and track software vulnerabilities

7.8

Dark Reading 2026-08-10

The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists

7.8

SecurityWeek 2026-08-10

OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns

7.8

CyberScoop 2026-08-10

Why transparent AI agents matter more than you think

7.8

SecurityWeek 2026-08-10

Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds

8.0

SecurityWeek 2026-08-10

Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC

7.8

Help Net Security 2026-08-10

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users

7.8

SecurityWeek 2026-08-10

‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad

7.8

The Hacker News 2026-08-10

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

7.8

SecurityWeek 2026-08-10

Metabase Patches Vulnerability Exploited as Zero-Day

8.0

SecurityWeek 2026-08-10

CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability

7.8

Help Net Security 2026-08-10

OpenAI locks down Astra over potential critical cyber capabilities

7.8

Help Net Security 2026-08-10

GitHub Dependabot malware alerts now cover eight ecosystems

7.8

SecurityWeek 2026-08-10

Critical Flaws Discovered in Belgian eID Software Used by 2 Million People

7.8

SecurityWeek 2026-08-08

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data

7.8

The Hacker News 2026-08-08

Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

7.8

The Hacker News 2026-08-08

New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

7.8

The Hacker News 2026-08-08

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

7.8

The Hacker News 2026-08-08

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

7.8

CyberScoop 2026-08-07

More than half of AI-generated patches are broken

7.8

Dark Reading 2026-08-07

AI-Generated Patches Fail Half the Time

7.8

SecurityWeek 2026-08-07

Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix

8.4

SecurityWeek 2026-08-07

Microsoft, Apple Release Fresh Security Updates

7.8

SecurityWeek 2026-08-07

Critical Vulnerabilities Patched With Chrome 151 Update

8.0

Help Net Security 2026-08-07

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?

7.8

Help Net Security 2026-08-07

Gut feeling does nothing against AI spear phishing texts

7.8

PortSwigger Research 2026-08-06

CSS:the bomb inside your inbox

7.8

Dark Reading 2026-08-06

Researcher Claims Control of ChatGPT Secure Sandbox

7.8

Cloudflare Blog 2026-08-06

Building an open Agentic Internet: readable, discoverable, callable, and payable

7.8

Cloudflare Blog 2026-08-06

The next generation of MCP

8.2

SecurityWeek 2026-08-06

Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts

7.8

Help Net Security 2026-08-06

Three in four AI-generated vulnerability patches leave something broken

7.8

SecurityWeek 2026-08-06

Critical Paperclip Flaw Allowed Admin Access, Code Execution

7.8

Help Net Security 2026-08-06

Discounted Claude access bought on the gray market may expose every prompt you send

7.8

Help Net Security 2026-08-06

Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)

7.8

SecurityWeek 2026-08-06

Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities

8.3

SecurityWeek 2026-08-06

Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability

7.8

Help Net Security 2026-08-06

OWASP 2026 LLM Top 10: “The model will be fooled”

7.8

Dark Reading 2026-08-05

AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking

7.8

PortSwigger Research 2026-08-05

CRLF-Powered Desync Attacks: Beheading HTTP Streams

7.8

Dark Reading 2026-08-05

No Perfect Fix for AI Browser Prompt Injection Flaws

7.8

Dark Reading 2026-08-05

CSS: The Hidden Threat Lurking in Your Inbox

8.0

SecurityWeek 2026-08-05

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones

7.8

PortSwigger Research 2026-08-05

Can AI do novel security research? Meet the HTTP Terminator

7.8

Dark Reading 2026-08-05

15 TP-Link Bugs Expose Risks in Zero-Trust Provisioning

7.8

Dark Reading 2026-08-05

Flaws in Google APK for Python Unlock Agent-to-Agent Attack

7.8

Cloudflare Blog 2026-08-05

The Agent Access Model

7.8

SecurityWeek 2026-08-05

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts

7.8

Trail of Bits Blog 2026-08-05

A few notes on AWS Nitro Enclaves: KMS integration

7.8

SecurityWeek 2026-08-05

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

7.8

ZDI (Zero Day Initiative) 2026-08-05

ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-05

ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-08-05

ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

7.8

GitGuardian Blog 2026-08-05

Securing Agentic AI Workflows in n8n: From Leaked API Keys to Encryption Key Compromise

7.8

SecurityWeek 2026-08-04

Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer

7.8

GitGuardian Blog 2026-08-04

Credential Harvesting Explained: How Attackers Collect Secrets From Developer Machines

7.8

SecurityWeek 2026-08-04

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts

7.8

Palo Alto Unit 42 2026-08-04

The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software

7.8

Dark Reading 2026-08-04

AI Notetaker Lets Hackers Spy on Government, Corporate Video Calls

7.8

SecurityWeek 2026-08-04

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

7.8

The Hacker News 2026-08-04

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

7.8

The Hacker News 2026-08-04

Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

7.8

SecurityWeek 2026-08-04

Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering

7.8

The Hacker News 2026-08-04

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

8.0

SecurityWeek 2026-08-04

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks

7.8

The Hacker News 2026-08-04

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

7.8

Dark Reading 2026-08-03

Attackers Exploit N-able Patch Bypass Flaw on RMM Servers

7.8

The Hacker News 2026-08-03

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

7.8

Help Net Security 2026-08-03

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)

7.8

Dark Reading 2026-08-03

Is There Really a Fix for CISO Fatigue?

7.8

Cloudflare Blog 2026-08-03

Cloudflare Workers and Containers now support inbound TCP connections and gRPC

7.8

SecurityWeek 2026-08-03

N‑able Patches Vulnerability Exploited to Hack N-central Servers

7.8

Help Net Security 2026-08-03

KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)

7.8

SecurityWeek 2026-08-03

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks

7.8

Palo Alto Unit 42 2026-08-03

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

7.8

The Hacker News 2026-08-03

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

7.8

The Hacker News 2026-08-03

Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

7.8

SecurityWeek 2026-08-01

Ruby on Rails Patches Critical Vulnerability

7.8

The Hacker News 2026-08-01

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction

7.8

Dark Reading 2026-07-31

The Morning After We Pull a Root of Trust, Nobody Owns It

7.8

The Hacker News 2026-07-31

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

7.8

The Hacker News 2026-07-31

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

8.0

SecurityWeek 2026-07-31

Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace

8.7

SecurityWeek 2026-07-31

Critical Flaw Allowed to Azure Cosmos DB Pwnage

8.0

SecurityWeek 2026-07-31

Critical Code Execution Vulnerability Patched in TeamCity

7.8

Dark Reading 2026-07-30

AI Harnesses Burst With Potential Exploit Opps

7.8

Dark Reading 2026-07-30

Claude Mythos — Hype vs. Reality: What Security Teams Need to Know

7.8

SecurityWeek 2026-07-30

‘DangleGeddon’: AI Could Weaponize Forgotten DNS Records at Global Scale

7.8

Trail of Bits Blog 2026-07-30

Building secure Uniswap v4 hooks

7.8

Dark Reading 2026-07-29

When AppSec Scanners Become a Supply Chain Attack Vector

7.8

Microsoft Security Blog 2026-07-29

​​Better security starts with better questions

7.8

Dark Reading 2026-07-29

Patch-Resistant 'RufRoot' Flaw Can Unleash Malicious AI Agent Swarms

7.8

Cloudflare Blog 2026-07-29

Post-quantum authentication to origins is now supported

7.8

Dark Reading 2026-07-28

Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

7.8

Dark Reading 2026-07-28

Thousands of Data Center Controllers Open to Takeover

7.8

CyberScoop 2026-07-28

Here’s what Anthropic found when it turned Mythos loose on encryption algorithms

7.8

CyberScoop 2026-07-28

FBI sees Anthropic’s Mythos as a law enforcement challenge

7.8

Dark Reading 2026-07-28

'Certighost' Flaw Haunts Microsoft Active Directory Certificates

7.8

CyberScoop 2026-07-28

AI-assisted security tools are finding more bugs, but the threat level has not changed

7.8

GitGuardian Blog 2026-07-28

How to Reduce Time to Revoke for Exposed Credentials

7.8

Trail of Bits Blog 2026-07-28

How we use /goal to find bugs in Patch the Planet

7.8

Dark Reading 2026-07-27

'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure

7.8

Dark Reading 2026-07-27

Adversaries Don't Need a Zero-Day — They Read Your Rulebook

7.8

The Hacker News 2026-07-27

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

7.8

SecurityWeek 2026-07-27

New GitHub, PyPI Policies Boost Supply Chain Security

7.8

The Hacker News 2026-07-27

n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

7.8

SecurityWeek 2026-07-27

What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out

7.8

SecurityWeek 2026-07-27

Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits

7.8

Cybersecurity Dive 2026-07-27

What the Trojan horse gets right (and wrong) about AI security

7.8

Cybersecurity Dive 2026-07-27

In the Mythos era, security belongs at runtime

7.8

The Hacker News 2026-07-27

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

7.8

The Hacker News 2026-07-25

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

7.8

The Hacker News 2026-07-25

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

7.8

SecurityWeek 2026-07-25

Rockwell Patches Code Execution Flaws in Arena Simulation Software

7.8

Cloudflare Blog 2026-07-24

BGP ORIGIN attribute manipulation and its impact on the Internet

7.8

The Hacker News 2026-07-24

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

7.8

Dark Reading 2026-07-24

Default Azure Automation Setting Enables Cross-Tenant Identity Takeover

7.8

The Hacker News 2026-07-24

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

8.0

The Hacker News 2026-07-24

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

7.8

The Hacker News 2026-07-24

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

7.8

Help Net Security 2026-07-24

Microsoft tightens Windows enterprise activation security

7.8

The Hacker News 2026-07-24

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

7.8

Dark Reading 2026-07-24

Europe's Multilingual Reality Exposes AI Security Gaps

7.8

The Hacker News 2026-07-24

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

7.8

Help Net Security 2026-07-24

The automotive software vulnerabilities hiding in your dashboard

7.8

Cisco Talos 2026-07-23

Don’t swing at everything

7.8

SecurityWeek 2026-07-23

OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider

7.8

SecurityWeek 2026-07-23

Is Patching Dead? Vulnerability Management in the Post-Mythos Era

7.8

GitGuardian Blog 2026-07-23

Why identity-local signals and topology signals are two layers of the same blast radius

8.0

The Hacker News 2026-07-23

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

7.8

SecurityWeek 2026-07-23

Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models

7.8

The Hacker News 2026-07-23

How Synthetic Identity Fraud is Coming for Machine Identities

7.8

Dark Reading 2026-07-23

Agentic AI Challenges Progress in Confidential Computing

7.8

Help Net Security 2026-07-23

Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)

7.8

Help Net Security 2026-07-23

PyPI hardens package security with new upload restrictions

7.8

SecurityWeek 2026-07-23

New Check Point Zero-Day Vulnerability Exploited in the Wild

7.8

The Hacker News 2026-07-23

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

7.8

The Hacker News 2026-07-23

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

7.8

Help Net Security 2026-07-23

Shadow AI is becoming enterprise security’s biggest blind spot

7.8

ZDI (Zero Day Initiative) 2026-07-23

ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-23

ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-23

ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-23

ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-23

ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-23

ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability

7.8

The Hacker News 2026-07-22

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

7.8

Sentinel Labs 2026-07-22

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

7.8

The Hacker News 2026-07-22

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

7.8

The Hacker News 2026-07-22

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

7.8

The Hacker News 2026-07-22

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

7.8

Dark Reading 2026-07-21

Using LLMs to Find and Prioritize Vulnerabilities Is No Easy Task

7.8

CyberScoop 2026-07-21

AI models keep getting caught cheating

7.8

GitGuardian Blog 2026-07-21

How to Measure Time to Revoke for Exposed Credentials

7.8

Dark Reading 2026-07-21

Choose Wisely: AI-Generated Coding Risk Varies, a Lot

7.8

SecurityWeek 2026-07-21

Exploitation of ServiceNow Vulnerability Seen Days After Disclosure

7.8

ZDI (Zero Day Initiative) 2026-07-21

ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-21

ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

7.8

Dark Reading 2026-07-20

'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

7.8

Dark Reading 2026-07-20

Remediating Vulnerabilities With LLMs: Inside Ivanti's Automation Push

7.8

Help Net Security 2026-07-20

ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)

7.8

CyberScoop 2026-07-20

Why blocking AI models won’t stop the cyber threats they create

7.8

The Hacker News 2026-07-20

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More

7.8

SecurityWeek 2026-07-20

OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability

7.8

The Hacker News 2026-07-20

Mythos Didn't Break Your Security Program. Your Exposure Window Could.

7.8

The Hacker News 2026-07-20

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

7.8

Cybersecurity Dive 2026-07-20

The secret problem in AI infrastructure: Why MCP security starts with secrets

7.8

Cybersecurity Dive 2026-07-20

Your attack surface is bigger than you think

7.8

Help Net Security 2026-07-20

The Windows 10 hangover is becoming a security problem

7.8

SecurityWeek 2026-07-20

Chrome 150 Update Patches Severe Memory Safety Bugs

7.8

SecurityWeek 2026-07-20

WP2Shell WordPress Vulnerabilities Exploited in the Wild

7.8

The Hacker News 2026-07-19

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

7.8

The Hacker News 2026-07-19

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

7.8

Help Net Security 2026-07-19

Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs

7.8

Help Net Security 2026-07-18

Two new high severity WordPress vulnerabilities, patch immediately!

7.8

Cloudflare Blog 2026-07-17

Cloudflare WAF protects WordPress applications from two high-severity vulnerabilities

7.8

Dark Reading 2026-07-17

Inc Ransomware Exploits SonicWall SMA Zero-Days

7.8

Dark Reading 2026-07-17

The Real AI Threat Is Blind Trust

7.8

Palo Alto Unit 42 2026-07-17

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

7.8

SecurityWeek 2026-07-17

Fresh SharePoint Vulnerability Exploited Soon After Disclosure

7.8

Help Net Security 2026-07-17

Prompt injection is becoming the XSS of the web agent era

7.8

Help Net Security 2026-07-17

The five step plan that cuts security budget waste

7.8

Dark Reading 2026-07-16

Agentic AI Is Untamable: Ask the Right Security Questions

7.8

Cisco Talos 2026-07-16

Begun, the Patch Wars have

7.8

Microsoft Security Blog 2026-07-16

Least privilege for AI agents: Identity, access, and tool binding

7.8

SecurityWeek 2026-07-16

Legacy Systems, Real-World Impacts: The Reality of OT Security

7.8

SecurityWeek 2026-07-16

AI Data Centers Are Being Built Faster Than They Can Be Secured

7.8

SecurityWeek 2026-07-16

Splunk, Zoom Patch Critical Vulnerabilities

7.8

SecurityWeek 2026-07-16

F5 Patches Multiple NGINX, BIG-IP Vulnerabilities

7.8

GitGuardian Blog 2026-07-16

The Perimeter Moved to the Laptop: From Network, to Identity, to the Developer Endpoint

7.8

SecurityWeek 2026-07-16

Old UEFI Shims Expose Systems to Secure Boot Bypass

7.8

SecurityWeek 2026-07-16

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day

7.8

Dark Reading 2026-07-15

Forgotten Bootloaders Expose Secure Boot Blind Spot

8.0

CyberScoop 2026-07-15

SonicWall customers under threat as attackers exploit 2 zero-days

7.8

Dark Reading 2026-07-15

Claude Flaw Automatically Sends Malicious Prompts to AI Agents

7.8

SecurityWeek 2026-07-15

Unpatched Cursor Vulnerability Exposes Users to Code Execution

7.8

SecurityWeek 2026-07-15

CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities

7.8

The Hacker News 2026-07-15

Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws

7.8

Dark Reading 2026-07-15

2-Click Cursor Exploit Enables Dev Environment Takeover

7.8

SecurityWeek 2026-07-15

Windows Bind Link Attacks Can Hide Malware From EDR Tools

7.8

The Hacker News 2026-07-15

SASE Has An AI Blind Spot. Inspecting Packets Is No Longer Enough.

8.0

The Hacker News 2026-07-15

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

7.8

SecurityWeek 2026-07-15

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow

7.8

The Hacker News 2026-07-15

Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution

7.8

SecurityWeek 2026-07-15

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption

7.8

SecurityWeek 2026-07-15

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell

7.8

SecurityWeek 2026-07-15

Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates

7.8

The Hacker News 2026-07-15

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

7.8

Dark Reading 2026-07-14

Records Are Made to Be Broken: Patch Tuesday Raises Triage Stakes

7.8

Cisco Talos 2026-07-14

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

8.0

CyberScoop 2026-07-14

Microsoft discloses ‘the mother of all’ vulnerability loads, tripling June’s previous record

7.8

Dark Reading 2026-07-14

6 GHz Wi-Fi Flaws Could Disrupt Critical Systems

8.0

Krebs on Security 2026-07-14

Microsoft Patches a Record 570 Security Flaws

7.8

GitGuardian Blog 2026-07-14

Identity Infrastructure: Why Credentials Are the Layer Directories Don't Secure

7.8

Dark Reading 2026-07-14

Cursor IDE Auto-Executes Malicious Code in Poisoned Repos

7.8

Cisco Talos 2026-07-14

The serpent’s tongue: Luring the Python out of its den

7.8

Microsoft Security Blog 2026-07-13

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

7.8

Help Net Security 2026-07-13

Tidal Cyber connects assets, vulnerabilities, and threats through Threat-Led Defense

7.8

Help Net Security 2026-07-13

Fake OAuth client IDs are helping attackers slip past sign-in logs

8.0

SecurityWeek 2026-07-13

RabbitMQ Vulnerability Threatens Enterprise Systems

7.8

SecurityWeek 2026-07-13

Zimbra Patches Critical Code Execution Vulnerability

7.8

SecurityWeek 2026-07-13

Organizations Warned of Exploited Joomla Extension Vulnerabilities

7.8

Cybersecurity Dive 2026-07-13

Copy-paste might be the riskiest thing your enterprise employees do all day

7.8

CyberScoop 2026-07-13

AI-generated code has made security debt a governance problem

7.8

SecurityWeek 2026-07-13

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns

7.8

Help Net Security 2026-07-12

Debian 13.6 security update patches over a hundred advisories in trixie

7.8

The Hacker News 2026-07-11

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

7.8

Microsoft Security Blog 2026-07-10

Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

7.8

Dark Reading 2026-07-10

Fresh ATM Crypto Software Bugs: Jackpot or Bust?

7.8

Dark Reading 2026-07-10

AI Coding: Do Security Risks Outweigh Productivity Gains?

7.8

Cloudflare Blog 2026-07-10

Improving Smart Tiered Cache for Public Cloud Regions

7.8

MDSec Research 2026-07-10

Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)

7.8

SecurityWeek 2026-07-10

‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism

7.8

Dark Reading 2026-07-09

Microsoft Reins in RoguePlanet Zero-Day Threat

7.8

Dark Reading 2026-07-09

AI Agents Are a New Kind of Identity & Most Organizations Aren't Ready

7.8

Cisco Talos 2026-07-09

WolfSSL, GeoVision, VTK vulnerabilities

7.8

Cloudflare Blog 2026-07-09

Why we cannot wait for better post-quantum signature algorithms

7.8

SecurityWeek 2026-07-09

Palo Alto Networks Patches 13 Vulnerabilities

7.8

Help Net Security 2026-07-09

Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)

7.8

SecurityWeek 2026-07-09

15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google

7.8

Help Net Security 2026-07-09

Your coding agent says no in chat and yes in the code

8.0

SecurityWeek 2026-07-09

Microsoft Patches Defender ‘RoguePlanet’ Vulnerability

7.8

SecurityWeek 2026-07-09

AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique

7.8

Dark Reading 2026-07-09

European Organizations Have a Collaboration Security Confidence Gap

7.8

SecurityWeek 2026-07-09

Chrome 150 Update Patches 27 Vulnerabilities

7.8

Help Net Security 2026-07-09

Malicious AI agent skills can slip past the scanners built to stop them

7.8

Microsoft Security Blog 2026-07-08

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

7.8

SecurityWeek 2026-07-08

Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations

7.8

SecurityWeek 2026-07-08

CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws

7.8

SecurityWeek 2026-07-08

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

7.8

ZDI (Zero Day Initiative) 2026-07-08

ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-08

ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-08

ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-08

ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-08

ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-07-08

ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

7.8

Dark Reading 2026-07-07

Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft

7.8

SecurityWeek 2026-07-07

Critical Gitea Flaw Under Active Exploitation, Researchers Warn

7.8

The Hacker News 2026-07-07

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

7.8

Dark Reading 2026-07-07

'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows

7.8

GitGuardian Blog 2026-07-07

Every Laptop Is a Credential Store: Where Secrets Hide

7.8

The Hacker News 2026-07-07

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

7.8

The Hacker News 2026-07-07

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

7.8

SecurityWeek 2026-07-07

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

7.8

SecurityWeek 2026-07-07

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

7.8

The Hacker News 2026-07-07

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

8.1

SecurityWeek 2026-07-07

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems

7.8

The Hacker News 2026-07-07

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

7.8

The Hacker News 2026-07-07

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

7.8

Dark Reading 2026-07-06

CitrixBleed-ing Again? NetScaler Vulnerability Under Attack

7.8

The Hacker News 2026-07-06

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

7.8

The Hacker News 2026-07-06

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure

7.8

SecurityWeek 2026-07-06

The Shift Toward Business-Aligned Risk Management

7.8

Help Net Security 2026-07-06

OpenSSH 10.4 arrives with security fixes and a post-quantum signature option

7.8

SecurityWeek 2026-07-06

Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability

7.8

PT SWARM (Positive Technologies) 2026-07-06

Hack the Elephant One Bite at a Time: NUL byte SQL Injection in pdo_firebird and NULL Pointer Dereference in PDO via pdo_pgsql

7.8

Detectify Blog 2026-07-06

Why traditional DAST Tools fail modern AppSec teams (and how to fix it)

7.8

CyberScoop 2026-07-06

Finding vulnerabilities was never the hard part

7.8

The Hacker News 2026-07-06

New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions

7.8

The Hacker News 2026-07-06

Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages

7.8

The Hacker News 2026-07-06

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

7.8

Help Net Security 2026-07-06

How to prioritize AI agent security by business impact

7.8

Help Net Security 2026-07-06

Securing the inbox: Where identity, brand and security meet

7.8

Help Net Security 2026-07-06

OAuth, guest accounts, and weak MFA drive SaaS risk

7.8

Help Net Security 2026-07-05

New ClamAV security patch closes seven scanner bugs dating back two decades

7.8

Help Net Security 2026-07-05

Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack

7.8

The Hacker News 2026-07-03

Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

7.8

The Hacker News 2026-07-03

New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android

7.8

Dark Reading 2026-07-03

Chinese LLMs Broaden the Gap Between Attackers & Defenders

8.0

SecurityWeek 2026-07-03

Critical Cursor AI Code Editor Flaws Could Lead to OS-Level Remote Code Execution

7.8

Help Net Security 2026-07-03

Organizations struggle to prioritize known cyber risks

7.8

Palo Alto Unit 42 2026-07-02

How We Added WebAuthn to a Browser-Based RDP Client

7.8

Dark Reading 2026-07-02

Apple Reverses Age-Old Patch Policy to Keep Up With AI

7.8

watchTowr Labs 2026-07-02

It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)

7.8

SecurityWeek 2026-07-02

New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure

7.8

SecurityWeek 2026-07-02

How to Conduct a Successful Audit of AI-Driven Software Development

7.8

Sentinel Labs 2026-07-02

Context Engineering | Compaction & Agent Memory for Automated Malware Analysis

7.8

Dark Reading 2026-07-02

Anthropic's AI Finds Bugs. IBM Bets $5B It Can Fix Them.

7.8

The Hacker News 2026-07-02

Identity Lifecycle Management Wasn't Built for AI Agents

7.8

Trail of Bits Blog 2026-07-02

GPT-5.5-Cyber built a zlib fuzzing lab in a day

7.8

SecurityWeek 2026-07-02

Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

7.8

SecurityWeek 2026-07-02

‘BioShocking’ Attack Tricks AI Browsers Into Stealing Credentials

7.8

SecurityWeek 2026-07-02

CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability

7.8

The Hacker News 2026-07-02

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

7.8

Help Net Security 2026-07-02

Catching ransomware on the wire before it locks the file server

7.8

Help Net Security 2026-07-02

What the AI patch gap means for enterprise security

8.0

CyberScoop 2026-07-01

Researchers spot exploitation of another critical Oracle defect

7.8

Dark Reading 2026-07-01

'Phantom Squatting': An Emerging AI-Driven Supply Chain Threat

7.8

Black Hills InfoSec 2026-07-01

Finding and Addressing Vulnerable and Outdated Web Application Components

7.8

Cloudflare Blog 2026-07-01

Making AI search smarter

7.8

SecurityWeek 2026-07-01

Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities

7.8

SecurityWeek 2026-07-01

Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack

7.8

SecurityWeek 2026-07-01

Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors

7.8

SecurityWeek 2026-07-01

Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari

7.8

Help Net Security 2026-07-01

Claude Sonnet 5 includes safeguards against dangerous cyber use

7.8

Kaspersky Securelist 2026-07-01

OpenClaw: risks for the users and how to mitigate them

7.8

SecurityWeek 2026-07-01

Google Patches 382 Chrome Vulnerabilities

7.8

Help Net Security 2026-07-01

AI-generated code risks reach security, legal, and compliance teams

7.8

Help Net Security 2026-07-01

Microsoft wants to stop unwanted bots from entering Teams meetings

7.8

CyberScoop 2026-06-30

Citrix patches a new NetScaler flaw with echoes of CitrixBleed

7.8

watchTowr Labs 2026-06-30

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)

7.8

Microsoft Security Blog 2026-06-30

Securing AI agents: When AI tools move from reading to acting

7.8

Help Net Security 2026-06-30

Aikido Security acquires Root to expand backported fixes for open source vulnerabilities

7.8

Help Net Security 2026-06-30

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817)

7.8

Dark Reading 2026-06-29

Vulnerabilities Expose Private Data in Indian Government Systems

7.8

Dark Reading 2026-06-29

Can Clothes Make You Invisible to Facial Recognition?

7.8

watchTowr Labs 2026-06-29

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)

7.8

Help Net Security 2026-06-29

JSP webshells being dropped on unpatched PTC Windchill instances

7.8

The Hacker News 2026-06-29

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

7.8

SecurityWeek 2026-06-29

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

7.8

Dark Reading 2026-06-29

Amazon Q VS Extension Flaw Leads to Cloud Credential Theft

7.8

The Hacker News 2026-06-29

Why Post-Quantum Cryptography Starts With Credentials

7.8

SecurityWeek 2026-06-29

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

7.8

Help Net Security 2026-06-29

Mozilla warns of indirect prompt injection risk in AI coding agents

7.8

Help Net Security 2026-06-29

GPT-5.6 gets better at cybersecurity

7.8

Cybersecurity Dive 2026-06-29

From mythos to reality: Why the 2026 state of pentesting report proves the need for programmatic defenses

7.8

The Hacker News 2026-06-29

Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

7.8

Help Net Security 2026-06-29

Companies keep bolting AI onto their products, and the security bill is coming due

7.8

Help Net Security 2026-06-29

Most teams accept higher risk for faster AI database work

7.8

The Hacker News 2026-06-27

OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards

7.8

Dark Reading 2026-06-26

AI Decline? Confidence in Autonomous Penetration Testing Falls

7.8

Dark Reading 2026-06-26

New Initiative Tackles Security for End-of-Life Open Source Software

7.8

GitGuardian Blog 2026-06-26

AI Is the Newest Developer To Misunderstand Secrets In Your Git History

8.0

Dark Reading 2026-06-25

In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw

7.8

The Hacker News 2026-06-25

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

7.8

The Hacker News 2026-06-25

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

7.8

SecurityWeek 2026-06-25

Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning

7.8

SecurityWeek 2026-06-25

GitLab Patches Code Execution, Information Disclosure Vulnerabilities

7.8

Cisco Talos 2026-06-25

Introduction to COM usage by Windows threats

8.0

SecurityWeek 2026-06-25

25-Year-Old Vulnerability Patched in Curl

7.8

CyberScoop 2026-06-25

Why patch directives only go so far

7.8

SecurityWeek 2026-06-25

Chrome 149 Update Resolves 18 Severe Vulnerabilities

7.8

SecurityWeek 2026-06-25

Cisco SD-WAN Zero-Day Exploited Months Before Patching

8.1

The Hacker News 2026-06-24

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

7.8

Black Hills InfoSec 2026-06-24

Insufficient Egress Filtering: How Weak Outbound Controls Enable Attacks

7.8

The Hacker News 2026-06-24

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

7.8

GitGuardian Blog 2026-06-24

Hunting Leaked PyPI Tokens: 62 Live, 125 Packages Exposed

7.8

Dark Reading 2026-06-24

Apple's MacOS Gap Lets Users Disable Security Tools

7.8

CyberScoop 2026-06-24

Open-source security is posing challenges governments can’t easily solve

7.8

The Hacker News 2026-06-24

Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root

7.8

Cloudflare Blog 2026-06-24

Unlocking the Cloudflare app ecosystem with OAuth for all

7.8

Troy Hunt 2026-06-24

Weekly Update 509

7.8

Dark Reading 2026-06-23

'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows

7.8

SecurityWeek 2026-06-23

Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps

7.8

The Hacker News 2026-06-23

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

7.8

The Hacker News 2026-06-23

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

7.8

SecurityWeek 2026-06-23

Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks

8.0

SecurityWeek 2026-06-23

FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances

7.8

SecurityWeek 2026-06-23

OpenAI Refocuses Cybersecurity Efforts on Patching Over Discovery

7.8

The Hacker News 2026-06-23

OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws

7.8

Palo Alto Unit 42 2026-06-22

The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration

7.8

Microsoft Security Blog 2026-06-22

Guarding AI memory

7.8

Cloudflare Blog 2026-06-22

How we found a bug in the hyper HTTP library

7.8

Trail of Bits Blog 2026-06-22

Introducing Patch the Planet

7.8

The Hacker News 2026-06-22

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

7.8

The Hacker News 2026-06-22

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests

7.8

SecurityWeek 2026-06-22

Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data

7.8

The Hacker News 2026-06-22

Stop Your Legacy Infrastructure from Hijacking Your AI Agents

7.8

SecurityWeek 2026-06-22

Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data

7.8

SecurityWeek 2026-06-22

New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones

7.8

Cybersecurity Dive 2026-06-22

AI is transforming enterprise data risk. Here’s how security leaders are responding.

7.8

Help Net Security 2026-06-22

23 ClawHub plugins squatting official scopes expose AI registry security gaps

7.8

Help Net Security 2026-06-22

Encrypted DNS still tells an eavesdropper where to look

7.8

Help Net Security 2026-06-22

Hundreds of AI-powered iOS apps found exposing credentials

7.8

The Hacker News 2026-06-20

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys

7.8

The Hacker News 2026-06-19

Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain

7.8

The Hacker News 2026-06-19

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution

7.8

Help Net Security 2026-06-19

Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)

7.8

The Hacker News 2026-06-19

Forget Data Leakage: Shadow AI's Real Threat Is Access Control

7.8

The Hacker News 2026-06-19

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone

7.8

Help Net Security 2026-06-19

Your browser tab could become encrypted storage for someone else’s files

8.2

SecurityWeek 2026-06-19

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

7.8

Microsoft Security Blog 2026-06-19

AutoJack: How a single page can RCE the host running your AI agent

8.2

Dark Reading 2026-06-18

FIFA Bug Exposes World Cup Streams to Remote Takeover

7.8

Cloudflare Blog 2026-06-18

Build your own vulnerability harness

7.8

The Hacker News 2026-06-18

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution

7.8

The Hacker News 2026-06-18

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network

7.8

Dark Reading 2026-06-18

Get Out of Security Debt by Tackling the Exposure Problem

7.8

Cloudflare Blog 2026-06-17

Bringing more agent harnesses and frameworks to Cloudflare, starting with Flue

7.8

Microsoft Security Blog 2026-06-17

Beyond the benchmark: Advancing security at AI speed

7.8

The Hacker News 2026-06-17

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

8.0

CyberScoop 2026-06-17

Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April

7.8

The Hacker News 2026-06-17

Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization

7.8

The Hacker News 2026-06-17

The Top 10 Attack Surface Exposures in 2026

8.0

The Hacker News 2026-06-17

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

7.8

CyberScoop 2026-06-16

AI’s constant patching treadmill can be a security problem

7.8

The Hacker News 2026-06-16

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

7.8

Help Net Security 2026-06-16

Attackers are exploiting FortiSandbox vulnerabilities

7.8

Help Net Security 2026-06-16

SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558)

7.8

Help Net Security 2026-06-16

Radware AI Xploit Shield delivers virtual patching for newly identified application and API flaws

7.8

The Hacker News 2026-06-16

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week

8.0

Help Net Security 2026-06-16

Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262)

7.8

Palo Alto Unit 42 2026-06-16

Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE

7.8

The Hacker News 2026-06-16

Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw

7.8

The Hacker News 2026-06-16

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

7.8

Dark Reading 2026-06-15

Copilot 'SearchLeak' Attack Allows 1-Click Data Theft

7.8

Dark Reading 2026-06-15

The Beginning of the End of Social Engineering

7.8

Troy Hunt 2026-06-15

Weekly Update 508

8.0

The Hacker News 2026-06-13

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

7.8

watchTowr Labs 2026-06-12

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)

7.8

Dark Reading 2026-06-12

Claude Fable 5 Doesn't Change the Mythos Security Story

7.8

SecurityWeek 2026-06-12

Industry Reactions to Claude Fable 5: Feedback Friday

7.8

The Hacker News 2026-06-12

Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code

7.8

Trail of Bits Blog 2026-06-12

Factoring "short-sleeve" RSA keys with polynomials

7.8

The Hacker News 2026-06-12

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

7.8

SecurityWeek 2026-06-12

Ivanti Sentry Exploitation Attempts Hitting Honeypots

7.8

SecurityWeek 2026-06-12

Chrome 149 Update Patches 28 Vulnerabilities

7.8

SecurityWeek 2026-06-12

Anthropic Disputes Fable 5 AI Jailbreak

7.8

watchTowr Labs 2026-06-12

Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751)

7.8

Dark Reading 2026-06-11

Max-Severity Ivanti Flaw Exploited 24 Hours After Disclosure

7.8

The Hacker News 2026-06-11

New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

7.8

The Hacker News 2026-06-11

New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files

7.8

Dark Reading 2026-06-11

Segmentation Works for OT If Operators Are Paying Attention

7.8

The Hacker News 2026-06-11

AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS.

7.8

Palo Alto Unit 42 2026-06-11

Trust No Skill: Integrity Verification for AI Agent Supply Chains

7.8

Detectify Blog 2026-06-11

Attack Surface Monitoring vs DAST: Why security teams need both

7.8

The Hacker News 2026-06-11

GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks

7.8

Dark Reading 2026-06-10

Nightmare-Eclipse Drops Yet Another Microsoft Exploit, RoguePlanet

7.8

The Hacker News 2026-06-10

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

8.2

The Hacker News 2026-06-10

Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

7.8

The Hacker News 2026-06-10

CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation

7.8

GitGuardian Blog 2026-06-10

You Can't Secure What You Can't See: Making Non-Human Identities Governable

7.8

Help Net Security 2026-06-10

AISLE Snapshot keeps source code under enterprise control during vulnerability scanning

8.0

Help Net Security 2026-06-10

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520)

7.8

The Record by Recorded Future 2026-06-10

Microsoft ships largest Patch Tuesday on record, with one bug under active attack

7.8

Help Net Security 2026-06-10

Record Microsoft Patch Tuesday, fresh zero-day

7.8

The Hacker News 2026-06-10

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

7.8

The Hacker News 2026-06-10

Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

7.8

The Hacker News 2026-06-10

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

7.8

The Hacker News 2026-06-10

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS

7.8

ZDI (Zero Day Initiative) 2026-06-10

ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

7.8

watchTowr Labs 2026-06-10

More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)

7.8

Krebs on Security 2026-06-09

A Record-Breaking Patch Tuesday for June 2026

7.8

Palo Alto Unit 42 2026-06-09

Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility

7.8

Dark Reading 2026-06-09

Blame AI: Patch Tuesday Hits Record 206 CVEs

7.8

Cisco Talos 2026-06-09

Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities

7.8

Dark Reading 2026-06-09

Microsoft Exchange Flaw Lets Attackers Spoof Any Email Address

7.8

CyberScoop 2026-06-09

Microsoft breaks Patch Tuesday record with 206 vulnerabilities

7.8

The Record by Recorded Future 2026-06-09

CISA to transform how it assesses cyber vulnerabilities and risks, Andersen says

7.8

CyberScoop 2026-06-09

Anthropic’s new model is Mythos on a leash

7.8

The Hacker News 2026-06-09

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

7.8

CyberScoop 2026-06-09

Cisco customers encounter another SD-WAN zero-day under attack

7.8

The Hacker News 2026-06-09

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

7.8

The Hacker News 2026-06-09

Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now

7.8

Help Net Security 2026-06-09

LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271)

7.8

The Hacker News 2026-06-09

The Hidden Security Risk in Modern Networks: The Work Between Tools

7.8

Help Net Security 2026-06-09

Google patches Chrome zero-day exploited in the wild (CVE-2026-11645)

7.8

Help Net Security 2026-06-09

Apple Intelligence can now replace weak passwords without user intervention

7.8

The Hacker News 2026-06-09

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

7.8

Help Net Security 2026-06-09

Mythos Preview can weaponize N-day vulnerabilities in hours

7.8

The Hacker News 2026-06-09

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

7.8

Help Net Security 2026-06-09

The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic

7.8

Cloudflare Blog 2026-06-09

Defend against frontier cyber models: Cloudflare's architecture as customer zero

7.8

Dark Reading 2026-06-08

Check Point VPN Flaw Exploited Since Early May

8.0

The Hacker News 2026-06-08

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

7.8

Help Net Security 2026-06-08

Microsoft changes how Defender for Endpoint EDR updates are delivered on Windows

7.8

SecurityWeek 2026-06-08

Everybody Is Vibe Coding But Nobody Told the Security Team

8.1

The Hacker News 2026-06-08

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

7.8

Help Net Security 2026-06-08

Qilin ransomware affiliate exploited Check Point VPN zero-day (CVE-2026-50751)

7.8

SecurityWeek 2026-06-08

Everest Forms Vulnerability Exploited to Hack WordPress Sites

7.8

The Hacker News 2026-06-08

The Hardest Fork

8.0

Help Net Security 2026-06-08

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)

7.8

Help Net Security 2026-06-08

Samsung just made Galaxy phones more secure in One UI 9 beta

7.8

Cybersecurity Dive 2026-06-08

The new risk equation: Why endpoint security is a financial imperative

7.8

Help Net Security 2026-06-08

OpenAI is locking down parts of ChatGPT to reduce data theft risks

7.8

SecurityWeek 2026-06-08

SolarWinds Serv-U Vulnerability Exploited in the Wild

7.8

The Hacker News 2026-06-06

New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

8.2

The Hacker News 2026-06-06

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

7.8

The Hacker News 2026-06-06

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

7.8

The Hacker News 2026-06-06

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

7.8

Microsoft Security Blog 2026-06-05

Securing CI/CD in an agentic world: Claude Code Github action case

7.8

CyberScoop 2026-06-05

Nightmare Eclipse incident shows the researcher-vendor fights may never fully go away

7.8

Palo Alto Unit 42 2026-06-05

Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257

7.8

PT SWARM (Positive Technologies) 2026-06-05

The Click that shouldn’t have worked: RCE via clickjacking in Internet Explorer

7.8

SecurityWeek 2026-06-05

Chrome 149 Patches 429 Vulnerabilities

7.8

Help Net Security 2026-06-05

Let’s Encrypt works toward post-quantum certificates at web scale

8.0

Help Net Security 2026-06-05

Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245)

7.8

The Hacker News 2026-06-05

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

7.8

Help Net Security 2026-06-05

June 2026 Patch Tuesday forecast: Where are the CVEs?

7.8

SecurityWeek 2026-06-05

Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026

7.8

Help Net Security 2026-06-05

Thieves can pull off keyless car theft in under a minute and here’s how to stop them

7.8

Help Net Security 2026-06-05

Most pros have seen AI hallucinations in IT operations

7.8

Dark Reading 2026-06-04

4 Critical Threats Where Attackers Have the Advantage

7.8

Microsoft Security Blog 2026-06-04

Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us

7.8

CyberScoop 2026-06-04

Your AI agent could become your biggest insider threat

7.8

The Hacker News 2026-06-04

Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

7.8

The Hacker News 2026-06-04

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

7.8

The Hacker News 2026-06-04

Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It

7.8

CyberScoop 2026-06-04

Inside the race to adapt to an AI-powered security world

7.8

The Hacker News 2026-06-04

ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

7.8

SecurityWeek 2026-06-04

Gemini Voice Assistant Hijacked via Messaging Notifications

7.8

SecurityWeek 2026-06-04

Mirasvit Vulnerability Exploited to Execute Code on Magento Servers

7.8

Help Net Security 2026-06-04

OAuth marketplace apps keep access after publishers vanish

7.8

SecurityWeek 2026-06-04

Cisco Warns of Available PoC for Critical Unified CM Vulnerability

8.0

SecurityWeek 2026-06-04

VS Code Vulnerability Allows One-Click GitHub Token Theft

7.8

Help Net Security 2026-06-04

The modern-day business can learn a lot about risk from this year’s mega events

7.8

Help Net Security 2026-06-04

From critical to controlled: Cutting vulnerabilities in a live manufacturing environment

7.8

Help Net Security 2026-06-04

Attackers already know the secrets are on your developers’ machines. Do you?

7.8

ZDI (Zero Day Initiative) 2026-06-04

ZDI-26-328: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-06-04

ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-06-04

ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-06-04

ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability

7.8

The Hacker News 2026-06-03

WhatsApp, Slack Notifications Could Hijack Google Gemini on Android

7.8

Dark Reading 2026-06-03

Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover

7.8

Cloudflare Blog 2026-06-03

Enforcing the First AS in BGP AS_PATHs

7.8

The Hacker News 2026-06-03

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

7.8

The Hacker News 2026-06-03

Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)

7.8

SecurityWeek 2026-06-03

Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs

7.8

SecurityWeek 2026-06-03

Security of 100 AI Agents Tested and Ranked – What You Need to Know

8.0

The Hacker News 2026-06-03

One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens

7.8

Dark Reading 2026-06-03

Malicious Notifications Could Trick Google Gemini Users

7.8

The Hacker News 2026-06-03

Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)

7.8

SecurityWeek 2026-06-03

Organizations Warned of Exploited Linux Kernel Vulnerability

7.8

Trail of Bits Blog 2026-06-03

The sorry state of skill distribution

7.8

SecurityWeek 2026-06-03

‘HTTP/2 Bomb’ Exploit Knocks Web Servers Offline in Seconds

7.8

The Hacker News 2026-06-03

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

7.8

SecurityWeek 2026-06-03

Microsoft Tries to Calm Legal Threat Fears After Zero-Day Disclosure Backlash

7.8

The Hacker News 2026-06-03

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

7.8

Dark Reading 2026-06-02

Securing AI Agents Before They Go Rogue Is Next to Impossible

7.8

The Hacker News 2026-06-02

Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited

7.8

The Hacker News 2026-06-02

Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation

7.8

SecurityWeek 2026-06-02

Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk

7.8

SecurityWeek 2026-06-02

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities

7.8

CyberScoop 2026-06-02

Anthropic expanding access to Project Glasswing

8.0

SecurityWeek 2026-06-02

Anthropic Expanding Mythos Access to 150 New Organizations

7.8

Help Net Security 2026-06-02

Meta adds stricter guardrails for teen feeds

7.8

SecurityWeek 2026-06-02

The Zero-Knowledge Threat Actor and the End of Responsible Disclosure

7.8

Help Net Security 2026-06-02

Codex knowledge work expands into research, reports, and spreadsheets

8.0

SecurityWeek 2026-06-02

Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches

8.0

Help Net Security 2026-06-02

Google fixes actively exploited Android vulnerability (CVE-2025-48595)

7.8

Kaspersky Securelist 2026-06-02

Wardriving assessment across Mexico: Preparing for the 2026 World Cup

7.8

The Hacker News 2026-06-02

AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.

7.8

SecurityWeek 2026-06-02

Oracle WebLogic Vulnerability Exploited in the Wild

7.8

Help Net Security 2026-06-02

Microsoft Entra pushes passkeys, tightens identity security

7.8

CyberScoop 2026-06-01

Attackers are exploiting Palo Alto Networks defect that initially flew under the radar

7.8

Dark Reading 2026-06-01

Anthropic to Open Mythos AI to EU's ENISA

7.8

The Record by Recorded Future 2026-06-01

Inspector general finds NIST mistakes have made vulnerability database ineffective

7.8

Dark Reading 2026-06-01

Microsoft's Zero-Day Legal Threats Spark Backlash

7.8

SecurityWeek 2026-06-01

WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites

7.8

SecurityWeek 2026-06-01

Critical Windows Netlogon Vulnerability in Attackers’ Crosshairs

7.8

Dark Reading 2026-06-01

Patch Now: Another Palo Alto Auth Bypass Bug Under Active Exploit

8.0

Help Net Security 2026-06-01

Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)

7.8

The Hacker News 2026-06-01

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More

7.8

Help Net Security 2026-06-01

Cato cuts vulnerability protection time to 45 minutes with agentic threat research

7.8

The Record by Recorded Future 2026-06-01

Microsoft says it will not pursue security researchers after zero-day backlash

7.8

SecurityWeek 2026-06-01

19-Year-Old Linux Kernel Vulnerability Exposes Systems to Root Access

7.8

Kaspersky Securelist 2026-06-01

Containers on fire: from container escapes to supply chain attacks

8.0

SecurityWeek 2026-06-01

Recent Palo Alto Networks Vulnerability Exploited for Weeks

7.8

Cybersecurity Dive 2026-06-01

Top 4 data security best practices for the AI-enabled enterprise

7.8

The Hacker News 2026-06-01

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

8.0

SecurityWeek 2026-05-30

Exploit Code Published for Critical Flowise RCE Vulnerability

7.8

The Hacker News 2026-05-30

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

7.8

The Hacker News 2026-05-29

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

7.8

CyberScoop 2026-05-29

Federal audit reveals NIST’s NVD is plagued by poor planning and duplication

7.8

The Record by Recorded Future 2026-05-29

Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more

7.8

Dark Reading 2026-05-29

With Complex Cloud Integrations, Small Errors Lead to Major Compromises

7.8

SecurityWeek 2026-05-29

Gogs Zero-Day Exposes Servers to Remote Code Execution

7.8

Help Net Security 2026-05-29

Websites can spy on user activity by analyzing SSD behavior

7.8

The Hacker News 2026-05-29

What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks

7.8

SecurityWeek 2026-05-29

Chrome 148 Update Patches 151 Vulnerabilities

7.8

Kaspersky Securelist 2026-05-29

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

7.8

Help Net Security 2026-05-29

The behavioral signals that sharpen Trojan malware detection

7.8

Cisco Talos 2026-05-28

Less panic patching, more precision

7.8

The Hacker News 2026-05-28

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

7.8

Dark Reading 2026-05-28

Agentic AI Isn't Risky; the Way Orgs Deploy It Is

7.8

GitGuardian Blog 2026-05-28

Initial Access Changed, The Attack Path Did Not: Findings From The Verizon 2026 DBIR

7.8

The Hacker News 2026-05-28

Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal

7.8

CyberScoop 2026-05-28

Zapier fixes bug chain that researchers say risked widespread account takeover

7.8

MDSec Research 2026-05-28

Visual Studio Extensions Revisited

7.8

The Hacker News 2026-05-28

New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"

7.8

Cisco Talos 2026-05-28

DICOM, Pydicom, GDCM, and Orthanc: A technical tour of what really happens in the heap

7.8

ZDI (Zero Day Initiative) 2026-05-28

ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-05-28

ZDI-26-321: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-05-28

ZDI-26-322: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-05-28

ZDI-26-323: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-05-28

ZDI-26-324: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-05-28

ZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability

8.0

ZDI (Zero Day Initiative) 2026-05-28

ZDI-26-326: TrendAI Vision One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

7.8

Dark Reading 2026-05-27

AI-Assisted Exploit Development Outpaces Scanner Detection

8.0

Cisco Talos 2026-05-27

MediaArea heap-based buffer overflow vulnerabilities

7.8

The Hacker News 2026-05-27

5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

7.8

The Hacker News 2026-05-27

Gitea Vulnerability Exposes Private Container Images without Authentication

7.8

Proofpoint Blog 2026-05-27

Proofpoint Introduces Active Exploits Protection to Help Organizations Prioritize Vulnerability Patching for Real-World Attacks in the AI Era

7.8

CyberScoop 2026-05-26

Apple open-sources quantum-resistant encryption code

8.1

Dark Reading 2026-05-26

Microsoft Issues Out-of-Band SharePoint Patch

8.0

CyberScoop 2026-05-26

Anthropic: Mythos finds more than 10,000 software flaws in first month

7.8

Help Net Security 2026-05-26

Anthropic: Claude Mythos identified 10,000+ software flaws

7.8

Help Net Security 2026-05-26

Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)

7.8

The Hacker News 2026-05-26

Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions

8.0

SecurityWeek 2026-05-26

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment

7.8

Help Net Security 2026-05-26

High-severity SharePoint RCE bug patched by Microsoft (CVE-2026-45659)

7.8

The Hacker News 2026-05-26

MFA Prompt Bombing: Why Your Second Factor Isn't Saving You

7.8

The Hacker News 2026-05-26

CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks

7.8

The Hacker News 2026-05-26

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

7.8

Help Net Security 2026-05-25

Cisco refines its risk-based vulnerability disclosure for the AI era

7.8

The Hacker News 2026-05-25

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

7.8

SecurityWeek 2026-05-25

Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects

7.8

Help Net Security 2026-05-25

OpenHack: Open-source AI-powered vulnerability research

7.8

Help Net Security 2026-05-25

Boards want cyber risk in dollars, not CVE counts

7.8

Help Net Security 2026-05-25

Turns out the C-suite loves shadow AI

7.8

The Hacker News 2026-05-23

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

7.8

The Hacker News 2026-05-23

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

7.8

SecurityWeek 2026-05-23

‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains

8.0

The Hacker News 2026-05-23

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root

7.8

The Hacker News 2026-05-23

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

7.8

The Record by Recorded Future 2026-05-23

CISA to allow researchers to report vulnerabilities to exploited bugs catalog

7.8

SecurityWeek 2026-05-22

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure

7.8

Help Net Security 2026-05-22

$20 per zero-day is already the WordPress plugin reality

7.8

Help Net Security 2026-05-22

Deleted Google API keys keep working for up to 23 minutes, researchers warn

7.8

Trail of Bits Blog 2026-05-22

We hardened zizmor's GitHub Actions static analyzer

7.8

Help Net Security 2026-05-22

CISA’s new KEV nomination form opens reporting to vendors and researchers

8.0

SecurityWeek 2026-05-22

TrendAI Patches Apex One Zero-Day Exploited in the Wild

7.8

Dark Reading 2026-05-21

How CISOs Should Prep for Agentic-Ready AI BOMs

7.8

Dark Reading 2026-05-21

Google API Keys Remain Active After Deletion

7.8

CyberScoop 2026-05-21

CISA chief frets about open-source vulnerabilities, delayed security improvements

7.8

Dark Reading 2026-05-21

AI Agents Are Shifting Identity Security Budget Dynamics

7.8

Dark Reading 2026-05-21

Content Delivery Exploit Opens Websites to Brand Hijacking

7.8

SecurityWeek 2026-05-21

Cisco Patches Critical Vulnerability in Secure Workload

7.8

SecurityWeek 2026-05-21

Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking

7.8

Help Net Security 2026-05-21

Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498)

7.8

The Hacker News 2026-05-21

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

7.8

The Hacker News 2026-05-21

When Identity is the Attack Path

7.8

CyberScoop 2026-05-21

The readiness paradox: Why a false sense of cyber confidence is becoming a liability

7.8

SecurityWeek 2026-05-21

Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days

7.8

SecurityWeek 2026-05-21

Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI

7.8

SecurityWeek 2026-05-21

Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility

7.8

The Hacker News 2026-05-21

9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros

7.8

ZDI (Zero Day Initiative) 2026-05-21

ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-05-21

ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability

7.8

The Hacker News 2026-05-21

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

7.8

The Record by Recorded Future 2026-05-20

Discord migrates all users to end-to-end encryption by default

7.8

Dark Reading 2026-05-20

Patch Now: Critical Flaw in OT Robot OS Gives Attackers Control

7.8

SecurityWeek 2026-05-20

Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass

7.8

GitGuardian Blog 2026-05-20

Leaked Kubernetes Secrets: Impact Assessment and Mitigation Strategies

7.8

Help Net Security 2026-05-20

Verizon DBIR: Vulnerability exploitation is the dominant initial access vector

7.8

SecurityWeek 2026-05-20

Anthropic Silently Patches Claude Code Sandbox Bypass

7.8

The Hacker News 2026-05-20

Agent AI is Coming. Are You Ready?

7.8

SecurityWeek 2026-05-20

Caught Off Guard: Securing AI After It Hits Production

7.8

Kaspersky Securelist 2026-05-20

How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)

7.8

The Hacker News 2026-05-20

Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

7.8

Dark Reading 2026-05-20

What It'll Take to Make AI BOMs Usable in a Modern Security Program

7.8

Dark Reading 2026-05-19

Verizon DBIR: Enterprises Face a Dangerous Vulnerability Glut

7.8

CyberScoop 2026-05-19

Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches

7.8

Dark Reading 2026-05-19

Windows Zero-Day Barrage Continues After Patch Tuesday

7.8

SecurityWeek 2026-05-19

Drupal to Patch Highly Critical Vulnerability at Risk of Quick Exploitation

7.8

Cisco Talos 2026-05-19

TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities

7.8

The Hacker News 2026-05-19

DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability

7.8

Detectify Blog 2026-05-19

Understanding the OWASP Top 10 2025 for Modern Application Security

7.8

SecurityWeek 2026-05-19

Unpatched ChromaDB Vulnerability Can Lead to Server Takeover

7.8

Help Net Security 2026-05-19

The end of unencrypted Discord calls is here

7.8

SecurityWeek 2026-05-19

Cyber Resilience is the New Business Continuity Plan

7.8

The Hacker News 2026-05-19

Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare

7.8

SecurityWeek 2026-05-19

PoC Released for DirtyDecrypt Linux Kernel Vulnerability

7.8

The Hacker News 2026-05-19

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

8.0

SecurityWeek 2026-05-19

Critical Vulnerability Exposes Industrial Robot Fleets to Hacking

7.8

Dark Reading 2026-05-18

Microsoft Exchange Zero-Day Under Attack, No Patch Available

7.8

Dark Reading 2026-05-18

'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments

7.8

CyberScoop 2026-05-18

AI might cut false positives, but it won’t stop the slop

7.8

The Record by Recorded Future 2026-05-18

Experts warn of privacy risks as AI firms looks to connect to financial accounts

7.8

Dark Reading 2026-05-18

The Boring Stuff is Dangerous Now

7.8

SecurityWeek 2026-05-18

‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery

7.8

The Hacker News 2026-05-18

Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws

7.8

SecurityWeek 2026-05-18

Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE

7.8

The Hacker News 2026-05-18

MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

7.8

SecurityWeek 2026-05-18

Exploitation of Critical NGINX Vulnerability Begins

7.8

Cloudflare Blog 2026-05-18

Project Glasswing: what Mythos showed us

7.8

SecurityWeek 2026-05-18

Hackers Earn $1.3 Million at Pwn2Own Berlin 2026

7.8

Help Net Security 2026-05-17

Debian 13.5 point release lands with security fixes, bug patches

7.8

The Hacker News 2026-05-17

NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker Crashes and Possible RCE

7.8

Help Net Security 2026-05-17

Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited

7.8

The Hacker News 2026-05-16

Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming

8.0

SecurityWeek 2026-05-16

PoC Code Published for Critical NGINX Vulnerability

7.8

CyberScoop 2026-05-15

Cisco zero-day under ongoing attack by persistent threat group

7.8

The Hacker News 2026-05-15

Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

7.8

The Record by Recorded Future 2026-05-15

CISA orders all federal agencies to patch exploited bug in Cisco SD-WAN systems by Sunday

7.8

SecurityWeek 2026-05-15

Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild

7.8

The Hacker News 2026-05-15

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

7.8

PT SWARM (Positive Technologies) 2026-05-15

Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP

7.8

SecurityWeek 2026-05-15

Chrome 148 Update Patches Critical Vulnerabilities

7.8

SecurityWeek 2026-05-15

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026

7.8

The Hacker News 2026-05-15

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

7.8

The Hacker News 2026-05-15

CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

7.8

CyberScoop 2026-05-14

Pentagon cyber official calls advanced AI ‘revolutionary warfare’

7.8

Dark Reading 2026-05-14

Maximum Severity Cisco SD-WAN Bug Exploited in the Wild

7.8

CyberScoop 2026-05-14

White House cyber official: identity security matters more than ever in the age of AI

7.8

Cisco Talos 2026-05-14

The time of much patching is coming

7.8

The Hacker News 2026-05-14

Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

7.8

Microsoft Security Blog 2026-05-14

Defense in depth for autonomous AI agents

7.8

SecurityWeek 2026-05-14

Enhancing Data Center Security Without Sacrificing Performance

7.8

SecurityWeek 2026-05-14

New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation

7.8

SecurityWeek 2026-05-14

Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere

7.8

The Hacker News 2026-05-14

PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

7.8

The Hacker News 2026-05-14

How AI Hallucinations Are Creating Real Security Risks

7.8

SecurityWeek 2026-05-14

F5 Patches Over 50 Vulnerabilities

7.8

SecurityWeek 2026-05-14

Hackers Targeted PraisonAI Vulnerability Hours After Disclosure

7.8

The Hacker News 2026-05-14

Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

7.8

SecurityWeek 2026-05-14

High-Severity Vulnerability Patched in VMware Fusion

7.8

SecurityWeek 2026-05-14

Researcher Drops YellowKey, GreenPlasma Windows Zero-Days

7.8

The Hacker News 2026-05-14

New Fragnesia Linux Kernel LPE Grants Root Access via Page Cache Corruption

8.0

The Hacker News 2026-05-14

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

7.8

CyberScoop 2026-05-13

Researchers say AI just broke every benchmark for autonomous cyber capability

7.8

Help Net Security 2026-05-13

WhatsApp adds Incognito Chat for private Meta AI conversations

7.8

Black Hills InfoSec 2026-05-13

How to Identify and Exploit New Vulnerabilities

7.8

The Hacker News 2026-05-13

Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

7.8

The Record by Recorded Future 2026-05-13

Microsoft on pace to break annual vulnerability record as AI-driven patch wave takes hold

7.8

The Hacker News 2026-05-13

Most Remediation Programs Never Confirm the Fix Actually Worked

7.8

Help Net Security 2026-05-13

Microsoft’s agentic security system found four critical Windows RCE flaws

8.0

The Hacker News 2026-05-13

Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws

7.8

Cisco Talos 2026-05-13

Breaking things to keep them safe with Philippe Laulheret

7.8

Google Project Zero 2026-05-13

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens

7.8

Help Net Security 2026-05-13

NetSPI AI-powered Continuous Pentesting identifies high-impact vulnerabilities

7.8

Help Net Security 2026-05-13

The hidden risk of non-human identities in AI adoption

7.8

Microsoft Security Blog 2026-05-12

Defense at AI speed: Microsoft’s new multi-model agentic security system finds 16 new vulnerabilities

7.8

Krebs on Security 2026-05-12

Patch Tuesday, May 2026 Edition

7.8

Dark Reading 2026-05-12

It's Patch Tuesday for Microsoft and Not a Zero-Day In Sight

7.8

CyberScoop 2026-05-12

Microsoft addresses 137 vulnerabilities in May’s Patch Tuesday, including 13 rated critical

7.8

Cisco Talos 2026-05-12

Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilities

7.8

SecurityWeek 2026-05-12

Microsoft Patches 137 Vulnerabilities

7.8

SecurityWeek 2026-05-12

Adobe Patches 52 Vulnerabilities in 10 Products

7.8

The Hacker News 2026-05-12

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

7.8

Dark Reading 2026-05-12

Hugging Face Packages Weaponized With a Single File Tweak

7.8

Cloudflare Blog 2026-05-12

When "idle" isn't idle: how a Linux kernel optimization became a QUIC bug

7.8

SecurityWeek 2026-05-12

Apple Patches Dozens of Vulnerabilities in macOS, iOS

7.8

SecurityWeek 2026-05-12

SAP Patches Critical S/4HANA, Commerce Vulnerabilities

7.8

The Hacker News 2026-05-12

Why Agentic AI Is Security's Next Blind Spot

7.8

The Hacker News 2026-05-12

OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation

7.8

The Hacker News 2026-05-12

iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android

7.8

HackerOne Hacktivity 2026-05-12

CWE discovery

7.8

HackerOne Hacktivity 2026-05-12

CVE discovery

7.8

Palo Alto Unit 42 2026-05-11

Inside AD CS Escalation: Unpacking Advanced Misuse Techniques and Tools

7.8

Dark Reading 2026-05-11

Tech Can't Stop These Threats — Your People Can

7.8

The Hacker News 2026-05-11

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

7.8

The Hacker News 2026-05-11

Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation

7.8

Dark Reading 2026-05-11

'Dirty Frag' Exploit Poised to Blow Up on Enterprise Linux Distros

7.8

SecurityWeek 2026-05-11

Build Application Firewalls Aim to Stop the Next Supply Chain Attack

7.8

CyberScoop 2026-05-11

Google spotted an AI-developed zero-day before attackers could use it

7.8

The Record by Recorded Future 2026-05-11

Dirty Frag: Linux kernel hit by second major security flaw in two weeks

7.8

The Hacker News 2026-05-11

Your Purple Team Isn't Purple — It's Just Red and Blue in the Same Room

7.8

Cybersecurity Dive 2026-05-11

Identity is the new perimeter as rapid NHI proliferation threatens visibility and control

7.8

SecurityWeek 2026-05-11

New ‘Dirty Frag’ Linux Vulnerability Possibly Exploited in Attacks

7.8

The Hacker News 2026-05-10

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

7.8

The Hacker News 2026-05-09

cPanel, WHM Release Fixes for Three New Vulnerabilities — Patch Now

7.8

Microsoft Security Blog 2026-05-08

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

7.8

CyberScoop 2026-05-08

Flaw in Claude’s Chrome extension allowed ‘any’ other plugin to hijack victims’ AI

7.8

Kaspersky Securelist 2026-05-08

CVE-2025-68670: discovering an RCE vulnerability in xrdp

7.8

SecurityWeek 2026-05-08

Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover

7.8

SecurityWeek 2026-05-08

Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks

7.8

The Hacker News 2026-05-08

Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

7.8

CyberScoop 2026-05-07

Ivanti customers confront yet another actively exploited zero-day

7.8

Microsoft Security Blog 2026-05-07

When prompts become shells: RCE vulnerabilities in AI agent frameworks

7.8

The Hacker News 2026-05-07

Ivanti EPMM CVE-2026-6973 RCE Under Active Exploitation Grants Admin-Level Access

7.8

SecurityWeek 2026-05-07

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking

7.8

SecurityWeek 2026-05-07

Chrome 148 Rolls Out With 127 Security Fixes

7.8

SecurityWeek 2026-05-07

Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes

7.8

The Hacker News 2026-05-07

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

7.8

Dark Reading 2026-05-07

'TrustFall' Convention Exposes Claude Code Execution Risk

7.8

Cloudflare Blog 2026-05-07

How Cloudflare responded to the “Copy Fail” Linux vulnerability

7.8

SecurityWeek 2026-05-07

AI Coding Agents Could Fuel Next Supply Chain Crisis

7.8

SecurityWeek 2026-05-07

Cisco Patches High-Severity Vulnerabilities in Enterprise Products

7.8

Kaspersky Securelist 2026-05-07

Exploits and vulnerabilities in Q1 2026

7.8

The Hacker News 2026-05-07

vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution

7.8

Palo Alto Unit 42 2026-05-07

Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution

7.8

Dark Reading 2026-05-06

Yet Another Way to Bypass Google Chrome's Encryption Protection

7.8

CyberScoop 2026-05-06

A DOD contractor’s API flaw exposed military course data and service member records

7.8

The Record by Recorded Future 2026-05-06

Palo Alto warns of critical software bug used in firewall attacks

7.8

CyberScoop 2026-05-06

A critical Palo Alto PAN-OS zero-day is being exploited in the wild

7.8

Sentinel Labs 2026-05-06

LABScon25 Replay | Please Connect to the Foreign Entity to Enhance Your User Experience

7.8

The Hacker News 2026-05-06

Your AI Agents Are Already Inside the Perimeter. Do You Know What They're Doing?

7.8

SecurityWeek 2026-05-06

Oracle Debuts Monthly Critical Security Patch Updates

7.8

The Hacker News 2026-05-06

Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution

7.8

SecurityWeek 2026-05-06

Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls

7.8

HackerOne Hacktivity 2026-05-06

Skip to main content  >

7.8

Palo Alto Unit 42 2026-05-05

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years

7.8

The Hacker News 2026-05-05

Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE

7.8

Dark Reading 2026-05-05

Microsoft Edge Stores Passwords in Process Memory, Posing Enterprise Risk

7.8

SecurityWeek 2026-05-05

Hacker Conversations: Joey Melo on Hacking AI

7.8

SecurityWeek 2026-05-05

Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft

7.8

SecurityWeek 2026-05-05

Critical Remote Code Execution Vulnerability Patched in Android

7.8

The Hacker News 2026-05-05

The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed

7.8

The Hacker News 2026-05-05

MetInfo CMS CVE-2026-29014 Exploited for Remote Code Execution Attacks

7.8

SecurityWeek 2026-05-05

Critical, High-Severity Vulnerabilities Patched in Apache MINA, HTTP Server

7.8

Trail of Bits Blog 2026-05-05

C/C++ checklist challenges, solved

7.8

The Hacker News 2026-05-05

We Scanned 1 Million Exposed AI Services. Here's How Bad the Security Actually Is

7.8

SecurityWeek 2026-05-05

MetInfo, Weaver E-cology Vulnerabilities in Attackers’ Crosshairs

7.8

SecurityWeek 2026-05-05

WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities

7.8

The Hacker News 2026-05-05

Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API

7.8

CyberScoop 2026-05-04

‘Copy Fail’ is a real Linux security crisis wrapped in AI slop

7.8

Dark Reading 2026-05-04

Exploit Cyber-Frenzy Threatens Millions via Critical cPanel Vulnerability

7.8

The Hacker News 2026-05-04

Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass

7.8

GitGuardian Blog 2026-05-04

Local Guardrails for Secrets Security in the Age of AI Coding Assistants

7.8

SecurityWeek 2026-05-04

Exploitation of ‘Copy Fail’ Linux Vulnerability Begins

7.8

CyberScoop 2026-05-04

Why data centers now belong on the critical infrastructure list

7.8

Cybersecurity Dive 2026-05-04

How OpenClaw’s agent skills become an attack surface

7.8

SecurityWeek 2026-05-04

Over 40,000 Servers Compromised in Ongoing cPanel Exploitation

7.8

Help Net Security 2026-05-03

ChatGPT advanced account security adds passkeys and hardware keys

7.8

Help Net Security 2026-05-03

Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months

7.8

The Hacker News 2026-05-03

CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV

7.8

Microsoft Security Blog 2026-05-02

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

7.8

The Record by Recorded Future 2026-05-01

Federal agencies must patch cPanel bug by Sunday, CISA says

7.8

The Record by Recorded Future 2026-05-01

British cyber agency warns of looming ‘patch wave’ as AI speeds flaw discovery

7.8

Help Net Security 2026-05-01

Identity is the control plane for distributed infrastructure

7.8

ZDI (Zero Day Initiative) 2026-05-01

ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

7.8

CyberScoop 2026-04-30

cPanel’s authentication bypass bug is being exploited in the wild, CISA warns

7.8

Dark Reading 2026-04-30

Another AI-Assisted Software Scan Yields 9-Year-Old Linux Bug

7.8

Dark Reading 2026-04-30

Anthropic's Mythos Has Landed: Here's What Comes Next for Cyber

7.8

SecurityWeek 2026-04-30

SonicWall Urges Immediate Patching of Firewall Vulnerabilities

7.8

Cloudflare Blog 2026-04-30

Agents can now create Cloudflare accounts, buy domains, and deploy

7.8

SecurityWeek 2026-04-30

Critical Gemini CLI Flaw Enabled Host Code Execution, Supply Chain Attacks

7.8

SecurityWeek 2026-04-30

EnOcean SmartServer Flaws Expose Buildings to Remote Hacking

8.0

SecurityWeek 2026-04-30

Critical cPanel & WHM Vulnerability Exploited as Zero-Day for Months

8.0

SecurityWeek 2026-04-30

‘Copy Fail’ Logic Flaw in Linux Kernel Enables System Takeover

7.8

CyberScoop 2026-04-30

Everyone’s building AI agents. Almost nobody’s ready for what they do to identity.

7.8

The Hacker News 2026-04-30

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

7.8

PT SWARM (Positive Technologies) 2026-04-30

Thinking in Graphs with IPAHound

7.8

The Hacker News 2026-04-30

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

7.8

GitGuardian Blog 2026-04-30

Identity Access Management Strategy for Non-Human Identities

7.8

Dark Reading 2026-04-30

Claude Mythos Fears Startle Japan's Financial Services Sector

7.8

Dark Reading 2026-04-29

Reverse Engineering With AI Unearths High-Severity GitHub Bug

7.8

Dark Reading 2026-04-29

AI Finds 38 Security Flaws in Electronic Health Record Platform

7.8

watchTowr Labs 2026-04-29

The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)

7.8

Microsoft Security Blog 2026-04-29

8 best practices for CISOs conducting risk reviews

7.8

SecurityWeek 2026-04-29

Fresh LiteLLM Vulnerability Exploited Shortly After Disclosure

7.8

SecurityWeek 2026-04-29

Hundreds of Internet-Facing VNC Servers Expose ICS/OT

7.8

The Hacker News 2026-04-29

What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)

7.8

Cisco Talos 2026-04-29

AI-powered honeypots: Turning the tables on malicious AI agents

8.0

SecurityWeek 2026-04-29

38 Vulnerabilities Found in OpenEMR Medical Software

7.8

The Hacker News 2026-04-29

Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately

7.8

SecurityWeek 2026-04-29

Chrome 147, Firefox 150 Security Updates Rolling Out

7.8

The Hacker News 2026-04-29

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

7.8

SecurityWeek 2026-04-29

Critical GitHub Vulnerability Exposed Millions of Repositories

7.8

The Hacker News 2026-04-29

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

7.8

CyberScoop 2026-04-28

Spy agency officials say job loss anxiety, moving fast ‘safely’ among top challenges in AI workforce overhaul

7.8

CyberScoop 2026-04-28

Federal CIO cautious on Anthropic’s Mythos despite planned rollout

8.0

The Hacker News 2026-04-28

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

7.8

GitGuardian Blog 2026-04-28

The Bot Left a Fingerprint: Detecting and Attributing LLM-Generated Passwords

7.8

The Hacker News 2026-04-28

Why Secure Data Movement Is the Zero Trust Bottleneck Nobody Talks About

7.8

The Hacker News 2026-04-28

Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

7.8

The Hacker News 2026-04-28

After Mythos: New Playbooks For a Zero-Window Era

7.8

The Hacker News 2026-04-28

Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

7.8

The Hacker News 2026-04-28

Microsoft Confirms Active Exploitation of Windows Shell CVE-2026-32202

7.8

ZDI (Zero Day Initiative) 2026-04-28

ZDI-26-305: (0Day) OpenAI Codex Sandbox Escape Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-28

ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability

7.8

Dark Reading 2026-04-27

Unpatched 'PhantomRPC' Flaw in Windows Enables Privilege Escalation

7.8

GitGuardian Blog 2026-04-27

Short-Lived Credentials in Agentic Systems: A Practical Trade-off Guide

7.8

SecurityWeek 2026-04-27

Incomplete Windows Patch Opens Door to Zero-Click Attacks

7.8

Dark Reading 2026-04-27

Parsing Agentic Offensive Security's Existential Threat

8.0

SecurityWeek 2026-04-27

OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 Years

7.8

SecurityWeek 2026-04-27

Malicious AI Prompt Injection Attacks Increasing, but Sophistication Still Low: Google

7.8

The Hacker News 2026-04-27

Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren't Ready for the Remediation Side

7.8

SecurityWeek 2026-04-27

Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root Access

7.8

Cybersecurity Dive 2026-04-27

When security becomes the attack surface: Why endpoint protection must evolve

7.8

SecurityWeek 2026-04-27

Firefox Vulnerability Allows Tor User Fingerprinting

7.8

ZDI (Zero Day Initiative) 2026-04-27

ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-27

ZDI-26-301: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-27

ZDI-26-302: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-27

ZDI-26-303: Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-27

ZDI-26-304: Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

7.8

The Hacker News 2026-04-25

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

7.8

Dark Reading 2026-04-24

Glasswing Secured the Code. The Rest of Your Stack Is Still on You

7.8

The Hacker News 2026-04-24

Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Engine

7.8

SecurityWeek 2026-04-24

Vulnerabilities Patched in CrowdStrike, Tenable Products

7.8

GitGuardian Blog 2026-04-24

What the Mythos-Ready Briefing Says About Credentials

7.8

Kaspersky Securelist 2026-04-24

PhantomRPC: A new privilege escalation technique in Windows RPC

7.8

The Hacker News 2026-04-24

LMDeploy CVE-2026-33626 Flaw Exploited Within 13 Hours of Disclosure

7.8

Palo Alto Unit 42 2026-04-23

Frontier AI and the Future of Defense: Your Top Questions Answered

7.8

Dark Reading 2026-04-23

Bad Memories Still Haunt AI Agents

7.8

SecurityWeek 2026-04-23

Chinese Cybersecurity Firm’s AI Hacking Claims Draw Comparisons to Claude Mythos

7.8

The Hacker News 2026-04-23

Project Glasswing Proved AI Can Find the Bugs. Who's Going to Fix Them?

7.8

SecurityWeek 2026-04-23

Apple Patches iOS Flaw Allowing Recovery of Deleted Chats

7.8

The Hacker News 2026-04-23

Apple Fixes iOS Flaw That Let FBI Recover Deleted Signal Messages

7.8

SecurityWeek 2026-04-23

Recent Microsoft Defender Vulnerability Exploited as Zero-Day

7.8

ZDI (Zero Day Initiative) 2026-04-23

ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-23

ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-23

ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-23

ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

7.8

Sentinel Labs 2026-04-22

LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?

7.8

Microsoft Security Blog 2026-04-22

AI-powered defense for an AI-accelerated threat landscape

7.8

Cloudflare Blog 2026-04-22

Making Rust Workers reliable: panic and abort recovery in wasm‑bindgen

7.8

SecurityWeek 2026-04-22

Mirai Botnet Targets Flaw in Discontinued D-Link Routers

7.8

SecurityWeek 2026-04-22

Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data

7.8

SecurityWeek 2026-04-22

Claude Mythos Finds 271 Firefox Vulnerabilities

7.8

The Hacker News 2026-04-22

Toxic Combinations: When Cross-App Permissions Stack into Risk

7.8

Palo Alto Unit 42 2026-04-22

When Wi-Fi Encryption Fails: Protecting Your Enterprise from AirSnitch Attacks

7.8

CyberScoop 2026-04-22

The AI era demands a different kind of CISO

7.8

SecurityWeek 2026-04-22

Google Antigravity in Crosshairs of Security Researchers, Cybercriminals

7.8

The Hacker News 2026-04-22

Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug

7.8

SecurityWeek 2026-04-22

Oracle Patches 450 Vulnerabilities With April 2026 CPU

7.8

The Hacker News 2026-04-22

Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape

7.8

Dark Reading 2026-04-21

Exploits Turn Windows Defender into Attacker Tool

7.8

The Hacker News 2026-04-21

22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP Converters

7.8

Dark Reading 2026-04-21

Surge in Bomgar RMM Exploitation Demonstrates Supply Chain Risk

7.8

Dark Reading 2026-04-21

Google Fixes Critical RCE Flaw in AI-Based Antigravity Tool

7.8

Cloudflare Blog 2026-04-21

Moving past bots vs. humans

7.8

SecurityWeek 2026-04-21

Unsecured Perforce Servers Expose Sensitive Data From Major Orgs

7.8

Detectify Blog 2026-04-21

How Internal Scanning works: Q&A with Detectify’s product expert

7.8

SecurityWeek 2026-04-21

Progress Patches Multiple Vulnerabilities in MOVEit WAF, LoadMaster

7.8

SecurityWeek 2026-04-21

Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities

7.8

The Hacker News 2026-04-21

Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution

7.8

Cisco Talos 2026-04-21

Bad Apples: Weaponizing native macOS primitives for movement and execution

7.8

CyberScoop 2026-04-21

Mythos can find the vulnerability. It can’t tell you what to do about it.

7.8

The Hacker News 2026-04-21

CISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal Deadlines

7.8

ZDI (Zero Day Initiative) 2026-04-21

ZDI-26-245: (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-21

ZDI-26-293: (0Day) Microsoft Office URI Handler NTLM Response Information Disclosure Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-21

ZDI-26-294: (0Day) Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-21

ZDI-26-295: (0Day) PublicCMS getXml Server-Side Request Forgery Information Disclosure Vulnerability

7.8

CyberScoop 2026-04-20

Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code execution

7.8

Dark Reading 2026-04-20

Serial-to-IP Devices Hide Thousands of Old and New Bugs

7.8

The Hacker News 2026-04-20

SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files

7.8

Microsoft Security Blog 2026-04-20

Making opportunistic cyberattacks harder by design

8.0

SecurityWeek 2026-04-20

Serial-to-IP Converter Flaws Expose OT and Healthcare Systems to Hacking

7.8

Dark Reading 2026-04-20

WhatsApp Leaks User Metadata to Attackers

7.8

The Hacker News 2026-04-20

Why Most AI Deployments Stall After the Demo

7.8

The Hacker News 2026-04-20

Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain

7.8

Palo Alto Unit 42 2026-04-20

Fracturing Software Security With Frontier AI Models

7.8

CyberScoop 2026-04-20

Network ‘background noise’ may predict the next big edge-device vulnerability

7.8

SecurityWeek 2026-04-20

Half of the 6 Million Internet-Facing FTP Servers Lack Encryption

7.8

SecurityWeek 2026-04-20

Hackers Fail to Exploit Flaw in Discontinued TP-Link Routers

7.8

Doyensec Blog 2026-04-19

CFITSIO Fuzzing: Memory Corruptions and a Codex-Assisted Pipeline

7.8

Help Net Security 2026-04-19

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits

7.8

Dark Reading 2026-04-17

How NIST's Cutback of CVE Handling Impacts Cyber Teams

7.8

SecurityWeek 2026-04-17

CoChat Launches AI Collaboration Platform to Combat Shadow AI

7.8

Dark Reading 2026-04-17

Every Old Vulnerability Is Now an AI Vulnerability

7.8

The Hacker News 2026-04-17

Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched

7.8

Cloudflare Blog 2026-04-17

Shared Dictionaries: compression that keeps up with the agentic web

7.8

Trail of Bits Blog 2026-04-17

We beat Google’s zero-knowledge proof of quantum cryptanalysis

7.8

SecurityWeek 2026-04-17

Recent Apache ActiveMQ Vulnerability Exploited in the Wild

7.8

SecurityWeek 2026-04-17

Cursor AI Vulnerability Exposed Developer Devices

7.8

The Hacker News 2026-04-17

NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions

7.8

The Hacker News 2026-04-17

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

7.8

Palo Alto Unit 42 2026-04-16

A Deep Dive Into Attempted Exploitation of CVE-2023-33538

7.8

Microsoft Security Blog 2026-04-16

Building your cryptographic inventory: A customer strategy for cryptographic posture management

7.8

GitGuardian Blog 2026-04-16

AI Agents Authentication: How Autonomous Systems Prove Identity

7.8

Detectify Blog 2026-04-16

Shadow AI and the evolution of Shadow IT Security – What to do when your code moves faster than your security

7.8

PT SWARM (Positive Technologies) 2026-04-15

Slowburn: Looking through AMD Platform Configuration Blobs infrastructure

7.8

GitGuardian Blog 2026-04-15

The Future Of GitHub Actions Security And What You Can Do Right Now

7.8

Black Hills InfoSec 2026-04-15

Signed, Trusted, and Abused: Proxy Execution via WebView2

7.8

Krebs on Security 2026-04-14

Patch Tuesday, April 2026 Edition

7.8

Dark Reading 2026-04-14

Privilege Elevation Dominates Massive Microsoft Patch Update

7.8

Cisco Talos 2026-04-14

Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities

7.8

Dark Reading 2026-04-14

EDR-Killer Ecosystem Expansion Requires Stronger BYOVD Defenses

7.8

Proofpoint Blog 2026-04-14

FIFA World Cup 2026: More than One-Third of Official Partners Expose the Public to the Risk of Email Fraud

7.8

CyberScoop 2026-04-13

Here’s how cyber heavyweights in the US and UK are dealing with Claude Mythos

7.8

Cloudflare Blog 2026-04-13

Durable Objects in Dynamic Workers: Give each AI-generated app its own database

7.8

Help Net Security 2026-04-12

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

7.8

SecurityWeek 2026-04-12

Adobe Patches Reader Zero-Day Exploited for Months

7.8

The Hacker News 2026-04-12

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621

7.8

Cisco Talos 2026-04-10

[Video] The TTP Ep. 22: The Collapse of the Patch Window

7.8

CyberScoop 2026-04-09

Why is the timeline to quantum-proof everything constantly shrinking?

7.8

GitGuardian Blog 2026-04-09

When We Use AI To Ship Fast, Secrets Spread Fast

7.8

Trail of Bits Blog 2026-04-09

Master C and C++ with our new Testing Handbook chapter

7.8

Palo Alto Unit 42 2026-04-08

Cracks in the Bedrock: Agent God Mode

7.8

Detectify Blog 2026-04-08

The 29-minute Breakout: Why monthly vulnerability scanning no longer works

7.8

Palo Alto Unit 42 2026-04-07

Cracks in the Bedrock: Escaping the AWS AgentCore Sandbox

7.8

Cloudflare Blog 2026-04-07

Cloudflare targets 2029 for full post-quantum security

7.8

Cisco Talos 2026-04-07

Talos Takes: 2025's ransomware trends and zombie vulnerabilities

7.8

Trail of Bits Blog 2026-04-07

What we learned about TEE security from auditing WhatsApp's Private Inference

7.8

Cisco Talos 2026-04-07

Year in Review: Vulnerabilities old and new and something React2

7.8

Palo Alto Unit 42 2026-04-06

Understanding Current Threats to Kubernetes Environments

7.8

CyberScoop 2026-04-06

Fortinet customers confront actively exploited zero-day, with a full patch still pending

7.8

SecurityWeek 2026-04-06

Google DeepMind Researchers Map Web Attacks Against AI Agents

7.8

SecurityWeek 2026-04-06

Fortinet Rushes Emergency Fixes for Exploited Zero-Day

7.8

The Hacker News 2026-04-05

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

7.8

Help Net Security 2026-04-04

FortiClient EMS zero-day exploited, emergency hotfixes available (CVE-2026-35616)

7.8

Palo Alto Unit 42 2026-04-03

When an Attacker Meets a Group of Agents: Navigating Amazon Bedrock's Multi-Agent Applications

7.8

Cisco Talos 2026-04-03

Do not get high(jacked) off your own supply (chain)

7.8

Cloudflare Blog 2026-04-02

Why we're rethinking cache for the AI era

7.8

watchTowr Labs 2026-04-02

You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)

7.8

ZDI (Zero Day Initiative) 2026-04-02

ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-02

ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

7.8

ZDI (Zero Day Initiative) 2026-04-02

ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability

7.8

Black Hills InfoSec 2026-04-01

Cloud Security: Tips and Resources for Securing the Cloud

7.8

Palo Alto Unit 42 2026-03-31

Double Agents: Exposing Security Blind Spots in GCP Vertex AI

8.1

Cisco Talos 2026-03-31

Ransomware in 2025: Blending in is the strategy

7.8

ZDI (Zero Day Initiative) 2026-03-31

ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

8.2

Dark Reading 2026-03-30

AI-Powered 'DeepLoad' Malware Steals Credentials, Evades Detection

8.2

Dark Reading 2026-03-30

F5 BIG-IP Vulnerability Reclassified as RCE, Under Exploitation

8.1

Dark Reading 2026-03-30

Manufacturing and Healthcare Share Struggles with Passwords

8.2

Microsoft Security Blog 2026-03-30

Addressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio

7.8

Dark Reading 2026-03-30

Storm Brews Over Critical, No-Click Telegram Flaw

7.8

Help Net Security 2026-03-29

Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages

7.8

watchTowr Labs 2026-03-28

The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)

8.0

Cisco Talos 2026-03-26

TP-Link, Canva, HikVision vulnerabilities

7.8

MDSec Research 2026-03-26

Disabling Security Features in a Locked BIOS

7.9

Cisco Talos 2026-03-26

Talos Takes: 2025 insights from Talos and Splunk

8.0

Kaspersky Securelist 2026-03-26

Coruna: the framework used in Operation Triangulation

7.8

Microsoft Security Blog 2026-03-25

Identity security is the new pressure point for modern cyberattacks

7.8

Kaspersky Securelist 2026-03-25

Anatomy of a Cyber World Global Report 2026

7.8

Trail of Bits Blog 2026-03-25

Try our new dimensional analysis Claude plugin

7.7

ESET WeLiveSecurity 2026-03-25

Virtual machines, virtually everywhere – and with real security gaps