1,062 articles
Threat IntelOneMain Financial files multi-state breach notices after an unauthorized network intrusion accessed personal loan records, SSNs, and borrower banking information.
KubernetesA critical flaw in Model Context Protocol (MCP) Kubernetes bridge servers allows attackers to inject malicious flags into kubectl tool calls, exposing cluster service tokens.
Palo AltoPalo Alto Networks resolves a critical buffer overflow in PAN-OS XML parsing (CVE-2026-0310) allowing unauthenticated attackers to execute root code.
Threat IntelA sophisticated typosquatted Python package targets AI engineering pipelines, masquerading as vLLM inference worker daemons to exfiltrate proprietary model weights.
Threat IntelCISA advisory ICSA-26-272-01 reveals unencrypted update conduits and hardcoded private signing keys in Lantronix G520 gateways, enabling root RCE.
Threat IntelRegulatory filings reveal MoneyGram's global service outage was caused by a social engineering attack on IT helpdesks, resulting in massive consumer data theft.
Threat IntelCISA advisory ICSA-26-272-02 exposes critical flaws in Toptech TMS7 and TopHAT, enabling remote unauthenticated attackers to hijack oil and gas loading racks.
Threat IntelA critical template injection flaw in Next.js next/og (CVE-2026-94545) allows unauthenticated remote attackers to execute arbitrary code via Satori SVG parsing.
AppleApple resolves a critical out-of-bounds write zero-day in CoreGraphics (CVE-2026-86950) exploited in targeted cyber-espionage attacks against iOS and macOS.
CiscoA critical URL hex-encoding vulnerability in Cisco Catalyst SD-WAN Manager allows unauthenticated remote attackers to bypass authentication and hijack fabrics.
Threat IntelA high-severity path traversal vulnerability in langchain-core allows attackers processing untrusted prompt configurations to read arbitrary host filesystem data.
OT / SCADACISA Advisory ICSA-26-211-07 warns of a high-severity protocol command manipulation flaw in Mitsubishi Electric CC-Link IE TSN industrial communication modules.
GoogleGoogle Cloud Security Bulletin GCP-2026-068 details a gVisor sandboxing namespace defect in Cloud Run worker nodes permitting local privilege escalation.
OT / SCADACISA Advisory ICSA-26-242-01 warns of a critical unauthenticated remote code execution vulnerability in Rockwell Automation FactoryTalk View SE.
AWS CloudAWS resolves a critical SSRF vulnerability in amazon-ssm-agent where port forwarding denylist bypasses permit link-local IMDS temporary credential exfiltration.
OT / SCADACISA Advisory ICSA-26-265-07 details a high-severity path traversal vulnerability in Siemens SIMOVE Fleetmanager allowing unauthenticated arbitrary file exfiltration.
Threat IntelA critical CVSS 9.8 vulnerability in Nginx UI permits unauthenticated attackers to execute arbitrary commands via exposed Model Context Protocol endpoints.
AWS CloudAWS Security Bulletin details an environment leakage defect in Amazon Bedrock Agent action group runtimes permitting cross-session IAM credential exposure.
OT / SCADACISA Advisory ICSA-26-240-02 warns of a critical heap-based buffer overflow in Schneider Electric EcoStruxure Operator Terminal Expert enabling remote code execution.
MicrosoftMicrosoft MSRC bulletin details an untrusted search path vulnerability in Azure Monitor Agent Metrics Extension allowing low-privileged users to attain SYSTEM privileges.
OT / SCADACISA Advisory ICSA-26-232-01 warns of a high-severity cleartext credential storage flaw in Johnson Controls Simplex Incident Manager fire safety software.
Threat IntelA critical CVSS 9.8 remote code execution vulnerability in Code Runner Model Context Protocol servers permits arbitrary host code execution via untrusted AI agent tool calls.
GoogleGoogle Cloud Bulletin GCP-2026-057 warns of an Envoy Proxy safe_regex parsing flaw in Cloud Service Mesh causing negative RBAC authorization policies to fail open.
OT / SCADACISA Advisory ICSA-26-225-13 warns of hardcoded encryption keys and unsalted password hashes in Siemens LOGO! Soft Comfort engineering software.