-
Exclusive: Onyx Security brings AI agent governance to Glean’s enterprise AI platform
AI agent security startup Onyx Security Inc. today announced an integration with enterprise artificial intelligence platform company Glean …
-
FAA Grounds US Flights Nationwide, Citing ‘Extraordinary’ Safety Concerns
FAA grounds flights nationwide, citing extraordinary safety concerns amid air traffic control communications problems. Here’s what …
-
This year’s bug count just passed 100K
Chalk up a new record for vulns. The number of Common Vulnerabilities and Exposures (CVEs) found and disclosed so far in 2026 surpassed …
-
GNSS Spoofing and Jamming: What They Do to RTK Positioning and How Field Teams Can Spot Them
Satellite positioning can fail even when a rover appears normal. Its fixed solution may disappear or its coordinates may disagree with …
-
Mid-sized businesses can’t leave quantum readiness to their suppliers
With suppliers focused on ensuring their own product lines are quantum-secure, end-users with diverse estates still can’t afford to sleep …
-
Amazon Threat Intelligence observes threat actors running cybercrime campaigns with Artex AI agents
From Oct. 3 to …
-
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its
-
Microsoft 365 Crawls Back to Life After a 24-Hour Outage
email is working again. After a widespread outage shut down Microsoft 365 services for businesses, governments, and tens of millions of …
-
The Guardian view on M John Harrison’s Booker win: a new frontier for science fiction | Editorial
cience fiction will never be Literature with a capital ‘L,’” began a New York Times review of Margaret Atwood’s novel Oryx and …
-
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, …
-
The Microsoft Outage Is a Warning for the World
Countless businesses, schools, hospitals, and governments have found out the hard way what it means to rely on a single company’s systems …
-
New York City votes to ban surveillance pricing
Two people shopping for the same product shouldn’t have to wonder whether one is paying more because a company knows more about them. …
●●●
NVD
- CVE-2026-126356 – Hono is a Web application framework that provides support for any JavaScript runtime. …
- CVE-2026-126357 – Hono is a Web application framework that provides support for any JavaScript runtime. …
- CVE-2026-120868 – Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or …
- CVE-2026-125801 – Concurrent Execution using Shared Resource with Improper Synchronization (‘Race …
- CVE-2026-126355 – Hono is a Web application framework that provides support for any JavaScript runtime. …
EXPLOITS
- Ruflo MCP Bridge 3.16.2 – Remote Code Execution
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
SECURELIST
- Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malici
- Transcending the trust boundaries: how a cloud pentest works
- Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
- IT threat evolution in Q3 2026. Mobile statistics
- IT threat evolution in Q3 2026. Non-mobile statistics