1,167 articles
Cyber AttackA global telecommunications consortium files SEC Form 8-K Item 1.05 after nation-state threat actors infiltrate subsea fiber cable network management platforms.
GoogleGoogle patches a critical breakout flaw in Vertex AI Agent Builder (CVE-2026-76215) allowing recursive tool invocations to escape sandboxes and exfiltrate IAM tokens.
AWS CloudAWS resolves security flaw CVE-2026-75210 in S3 Express One Zone storage class, addressing a session token reuse bug across high-performance compute enclaves.
Cyber AttackA major electric vehicle manufacturer files SEC Form 8-K Item 1.05 after threat actors breach cloud telematics, accessing vehicle GPS coordinates and remote commands.
Threat IntelLangChain issues advisory CVE-2026-74120 for Expression Language vectorstores, patching an unsafe deserialization flaw that allowed remote code execution.
Threat IntelCloudflare resolves critical vulnerability CVE-2026-73190 in Workers KV edge caching, where HTTP Range header normalization flaws allowed global cache poisoning.
KubernetesA multinational container terminal operator files SEC Form 8-K Item 1.05 after cyber adversaries compromise automated cargo dispatch and container routing systems.
Threat IntelvLLM issues critical advisory CVE-2026-72110 for its continuous batching inference engine, patching a PagedAttention memory calculation bug that leaked LLM KV-cache tokens.
Deep DiveEuropean Supervisory Authorities notify binding DORA technical standards requiring mandatory Threat-Led Penetration Testing (TLPT) and strict third-party ICT audits.
AWS CloudAWS issues advisory CVE-2026-71215 for Lambda Custom Runtimes, addressing a Firecracker microVM memory reclamation flaw that exposed ephemeral STS tokens.
Cyber AttackA premier semiconductor foundry submits SEC Form 8-K Item 1.05 after nation-state actors compromise CAD vaults and exfiltrate sub-2nm EUV lithography mask IP.
Threat IntelAnthropic issues advisory CVE-2026-70114 for the Model Context Protocol (MCP) filesystem server, patching a path traversal flaw that allowed tool-calling escapes.
GoogleGoogle fixes critical flaw CVE-2026-69210 in Cloud IAM Workload Identity Federation where improper validation of OIDC audience claims allowed cross-tenant service account hijacking.
RansomwareA premier defense aerospace supplier files SEC Form 8-K Item 1.05 after ransomware actors compromise unclassified R&D enclaves and exfiltrate sensor avionics telemetry.
AWS CloudAWS patches CVE-2026-68115 in Amazon Bedrock Agent Runtime where unvalidated context memory serialization allowed cross-agent jailbreaks and tool invocation hijacking.
Deep DiveMeitY and Data Protection Board of India issue binding DPDP Rules 2026 requiring annual algorithmic audits, biometric tokenization, and strict 6-hour breach reports.
MicrosoftA high-severity memory corruption flaw in Azure Kubernetes Service's Cilium eBPF dataplane allows unprivileged pods to compromise Linux worker nodes.
Cyber AttackA commercial aviation satellite communications provider files SEC Form 8-K Item 1.05 after nation-state actors breach in-flight telemetry and passenger Wi-Fi systems.
PostgreSQLA critical SQL injection flaw in LiteLLM Proxy's vector metadata filtering allows unauthenticated API consumers to execute arbitrary PostgreSQL queries.
GoogleA security flaw in Google Cloud Run's internal metadata proxy allows server-side request forgery to steal workload identity IAM tokens.
OT / SCADAA major North American energy utility discloses an SEC Form 8-K cyber incident involving extortion over exfiltrated regional transmission telemetry.
Threat IntelA high-severity vulnerability in Ollama allows unauthenticated network actors to trigger remote code execution when pulling tampered GGUF model manifests.
Deep DiveThe European Commission publishes harmonized technical standards for the Cyber Resilience Act, requiring hardware-based secure boot and 24-hour vulnerability notification.
AWS CloudA security vulnerability in AWS IAM Identity Center's SCIM protocol implementation could allow token bypass during automated user and group provisioning.