-
Beware the New AI-Fueled Ransomware Boom
Fully automated ransomware hasn’t arrived—yet. But seemingly unsophisticated attackers are using AI tools to wreak …
-
The Security Jobs Growing Around Enterprise AI Agents
Two years ago, most company AI use happened in a chat window. Today, AI assistants read shared mailboxes, search SharePoint, open support …
-
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an …
-
Big Tech takes a beating as online safety experts accuse companies of doing bare minimum
Technology companies are doing just enough to show a degree of compliance with the UK’s Online Safety Act, but are failing to meet the …
-
Exclusive: Onyx Security brings AI agent governance to Glean’s enterprise AI platform
AI agent security startup Onyx Security Inc. today announced an integration with enterprise artificial intelligence platform company Glean …
-
CVE-2026-129456 – In FRRouting, bgpd accepts a Tunnel Encapsulation attribute (type 23) whose outer TLV …
In FRRouting, bgpd accepts a Tunnel Encapsulation attribute (type 23) whose outer TLV length does not match the length of the attribute: …
-
CVE-2015-10149 – Dancer versions before 1.3400 for Perl pass unvalidated session ids from the session …
Dancer versions before 1.3400 for Perl pass unvalidated session ids from the session cookie to the session engine. read_session_id returns …
-
CVE-2026-129447 – Kroki before 0.36.0 contains a reflected cross-site scripting vulnerability in the …
Kroki before 0.36.0 contains a reflected cross-site scripting vulnerability in the /dbml/svg endpoint that allows unauthenticated attackers …
-
CVE-2026-129267 – A vulnerability was found in sergix44 XBackBone up to 3.8.2. Impacted is the function …
A vulnerability was found in sergix44 XBackBone up to 3.8.2. Impacted is the function MediaController::getRawById of the file …
-
CVE-2026-129264 – A security vulnerability has been detected in sox_ng up to 14.8.1. Affected by this issue …
A security vulnerability has been detected in sox_ng up to 14.8.1. Affected by this issue is the function read_samples_voc of the file …
-
CVE-2026-129262 – A weakness has been identified in Wuxi Wubang Security Software Wubang Five-in-One Safety …
A weakness has been identified in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to …
-
CVE-2026-129261 – A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The …
A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element is an unknown function in the …
●●●
NVD
- CVE-2026-126173 – The AutomatorWP Pro plugin for WordPress’ webhook addon is vulnerable to authorization …
- CVE-2026-129456 – In FRRouting, bgpd accepts a Tunnel Encapsulation attribute (type 23) whose outer TLV …
- CVE-2026-105983 – The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or …
- CVE-2026-124969 – The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image …
- CVE-2026-105984 – The Email Marketing 4Dem WordPress plugin through 2.0.5 does not perform authorization or …
EXPLOITS
- Ruflo MCP Bridge 3.16.2 – Remote Code Execution
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
SECURELIST
- Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malici
- Transcending the trust boundaries: how a cloud pentest works
- Citrus Ransomware: VLESS for traffic, Sn00py for encryption, and LLMs lending a hand
- IT threat evolution in Q3 2026. Mobile statistics
- IT threat evolution in Q3 2026. Non-mobile statistics