-
What Your IP Address Reveals Every Time You Visit a Website
Every site, ad network and tracker you load gets your IP address before anything else. Here is what they can work out from it, what they …
-
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Cisco “strongly” implored customers to patch yet another critical, make-me-root vulnerability in its Secure Email Gateway (SEG), one …
-
The Growing Importance of Cloud Services and Security in Digital Business
Cloud computing has revolutionized the way enterprises manage data, run applications, communicate, and provide digital services. Rather …
-
Data Governance Is a Security Control, Not a Compliance Checkbox
I’ve spent years fixing broken Glue jobs and Lake Formation permissions as an AWS support engineer, then moved to pre-sales architecture …
-
Penetration testing every deployment with AWS Continuum
(formerly AWS Security Agent) is a service that uses AI agents to find and confirm exploitable vulnerabilities in your running …
-
AI Agents Could Gain Ability to Self-Replicate
Research from Anthropic suggests small AI models may be able to clone themselves and spread across internet-connected devices within a …
-
Security researchers spent 6 days doing their Chromework, built 1B user exploit
Researchers at security startup Xbow used OpenAI’s GPT-5.6 Sol model to help chain three zero-day vulnerabilities in Chrome into an exploit …
-
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as …
-
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. …
-
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s …
-
Newly Exploited Vulnerability in Ivanti Connect Secure
Shane Barney, Chief Information Security Officer at Keeper Security, comments, “The newly disclosed zero-day in Ivanti Connect Secure …
-
Acumatica Appoints Jason James as CIO to Lead IT, AI and Security Strategy
Acumatica has appointed Jason (JJ) James as chief information officer, adding an experienced SaaS technology executive to its leadership …
●●●
NVD
- CVE-2026-110359 – Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege …
- CVE-2026-110385 – A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 …
- CVE-2026-92817 – The Ignition Perspective module does not properly validate session privileges when …
- CVE-2026-97629 – Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache …
- CVE-2026-108473 – Multiple Kasa devices contain an improper authentication vulnerability in the …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies