206 articles
Threat IntelIvanti patches critical SQL injection vulnerability CVE-2026-89310 in Endpoint Manager Core Server enabling unauthenticated remote code execution.
RansomwareForensic analysis of SEC Form 8-K Item 1.05 material cybersecurity incident disclosures: 4-day reporting timelines, root causes, and board oversight standards.
CMS SecurityJTL patches a critical arbitrary file upload vulnerability in JTL-Connector for WooCommerce (CVE-2026-87855) allowing unauthenticated web shell execution.
FortinetFortinet releases security updates for FortiOS and FortiProxy (CVE-2026-14851) resolving an information disclosure flaw that exposed administrative bearer tokens.
CMS SecurityWordPress security advisory resolves a high-severity privilege escalation flaw in SimpleForm (CVE-2026-104748) allowing unauthenticated users to register as admin.
Threat IntelONLYOFFICE patches a critical path traversal vulnerability in Document Server DocService (CVE-2021-3199) allowing arbitrary file overwrite and remote code execution.
CMS SecurityTyche Softwares resolves a critical PHP object injection flaw in Abandoned Cart Pro for WooCommerce (CVE-2026-97657) enabling unauthenticated remote code execution.
CMS SecurityTyche Softwares resolves an unauthenticated blind SQL injection flaw in Abandoned Cart Pro (CVE-2026-97668) allowing extraction of customer and order records.
Threat IntelStrapi resolves a high-severity vulnerability (CVE-2023-22894) where password reset tokens and API secrets were stored unhashed in database audit records.
Threat IntelApache Airflow releases security fix for CVE-2026-75156 in the Flask-AppBuilder provider, patching an OAuth2 role-mapping flaw leading to admin privilege escalation.
Threat IntelIBM resolves a denial of service vulnerability in WebSphere Application Server Liberty (CVE-2026-93909) where malformed HTTP/2 HPACK frames exhaust JVM heap memory.
MicrosoftMicrosoft addresses a critical Windows Remote Management command injection vulnerability (CVE-2026-96951) allowing remote code execution via WSMAN SOAP requests.
AWS CloudAWS resolves a high-severity OS command injection flaw in AWS Systems Manager Agent (CVE-2026-87911) affecting multi-step Run Command document execution.
GoogleGoogle Cloud updates authentication libraries for CVE-2026-19410 where improper audience validation allowed external OIDC tokens to impersonate IAM service accounts.
Threat IntelIvanti discloses critical vulnerability CVE-2026-104935 in Connect Secure and Policy Secure gateways allowing pre-auth SAML remote code execution.
GoogleGoogle Cloud resolves a high-severity privilege escalation flaw in Cloud Run and Artifact Registry auth helpers (CVE-2026-79696) exposing service account tokens.
AWS CloudAWS resolves an access control flaw in IAM Identity Center and AWS CLI session handling (CVE-2026-82856) where revoked STS tokens remained temporarily active.
MicrosoftMicrosoft addresses a critical privilege escalation flaw in Azure Arc Connected Machine Agent (CVE-2026-83711) exposing Hybrid Instance Metadata Service tokens.
Threat IntelApache Struts resolves critical vulnerability S2-032 (CVE-2016-3081) where dynamic method invocation enables arbitrary remote command execution via OGNL payloads.
Deep DiveThe Data Protection Board of India issues regulatory show-cause notices to major enterprise data fiduciaries over non-compliant algorithmic impact assessments.
Deep DiveThe Reserve Bank of India mandates migration to Post-Quantum Cryptography across hardware security modules and financial switches to counter Q-day risks.
VulnerabilityEuropean Supervisory Authorities designate Critical ICT Third-Party Providers under DORA, granting regulators direct inspection powers over major cloud hyperscalers.
VulnerabilityIndia notifies updated DPDP Rules 2026 mandating Significant Data Fiduciaries implement cross-border transfer whitelists and third-party algorithmic audits.
VulnerabilityThe Reserve Bank of India mandates regulated banking entities deploy multi-cloud architecture and air-gapped cryptographic vaults to prevent concentration risk.