-
Dell and CrowdStrike Bundle Falcon Guardian, Cloud Security, and Next-Gen SIEM Into the Dell AI Factory With NVIDIA
Dell Technologies and CrowdStrike have announced an integrated security offering for the Dell AI Factory with NVIDIA that puts three …
-
Railway Engineer Admits Running AI Agents Against Rival Cloud Platform
A Railway engineer admitted testing AI agents on Primcloud, whose founder says they sought customer secrets and scanned its network. An …
-
DigiCert admits 16-month security lapse exposed customer information
DigiCert has admitted that a botched server migration left an internal system exposed to the internet for more than a year, allowing an …
-
MDR vs SOC: How to choose the right option for your organisation
Finance: Do you hire full time finance teams or outsource to an accountant? …
-
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person’s computer, researchers at Forever …
-
Microsoft Paint RCE Fix Now Available, but Windows Update Won’t Deliver It
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a …
-
OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
An OpenSSH flaw that lets remote attackers log into passwordless accounts on Alpine Linux and other musl-based systems is being exploited, …
-
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
The use of a new AI-powered offensive security tool by cyber threat actors appears to be spreading well beyond the campaigns first …
-
Attacks on supermarket and blood storage systems prompt US warning
Attackers don’t have to steal information to cause serious harm. Sometimes, changing a temperature setting is …
-
CISA, FBI Urge Action to Protect Industrial Refrigeration Networks
The US government has urged organizations to take action to protect refrigeration systems from attacks that seek to remotely alter …
-
The Flood is Coming And The Pipes Were Already Full
An update on Athena, and some unsolicited predictions on what’s coming next On Saturday, Dario Amodei published We Must Pace the Frontier. …
●●●
NVD
- CVE-2026-87045 – The HTTP/2 server in subsys/net/lib/http/http_server_http2.c clears the connection’s …
- CVE-2026-123269 – A vulnerability was detected in libyal libvmdk. Affected by this vulnerability is the …
- CVE-2026-63017 – Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user …
- CVE-2026-123268 – A security vulnerability has been detected in libyal libvmdk up to …
- CVE-2025-71458 – FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- Virtualization security: attack layers and misconfiguration impact
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs