Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Industry vertical

Technology, Cloud & SaaS, page 5

Software companies, cloud platforms, data centres and managed services.

236 articlesUpdated 28 Sep 2026Page 5 of 10

ThreatsCloud & SaaSCritical
Public Exploits Released for Four Linux Kernel Flaws Enabling Local Root and Container Compromise
Working public exploits released for four Linux kernel flaws—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—enabling local root escalation and container escapes.
CST Newsroom19 Sep 202613 min read
ThreatsCloud & SaaSCritical
Amazon EKS Network Policy Agent Flaw Allows Pod Isolation Bypass Across Kubernetes Clusters
AWS patches high-severity flaw CVE-2026-86831 in Amazon EKS aws-network-policy-agent allowing unauthorized pod communication and network isolation bypass.
Daniel Okafor19 Sep 202611 min read
InsightsCloud & SaaS
AWS Resolves Privilege Escalation Flaw in IAM Identity Center Temporary Elevated Access
AWS resolves high-severity privilege escalation flaw CVE-2026-86830 in Temporary Elevated Access Management (TEAM) for IAM Identity Center.
Aisha Noor19 Sep 202610 min read
InsightsCloud & SaaS
Microsoft Resolves CVSS 10.0 Azure AI Foundry Authentication Bypass and Privilege Escalation Flaw
Microsoft patches maximum-severity CVSS 10.0 flaw CVE-2026-85889 in Azure AI Foundry enabling unauthenticated remote network privilege escalation.
Aisha Noor18 Sep 202612 min read
ThreatsCloud & SaaSCritical
PTC Windchill & FlexPLM Critical RCE Flaw Weaponized in Active Espionage Attacks
CISA orders emergency patching of PTC Windchill PLM vulnerability CVE-2026-12569 enabling unauthenticated remote code execution and CAD blueprint theft.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSHigh
Linux Kernel Crypto AF_ALG Socket Race Condition Flaw Weaponized for Root Escalation
CISA adds Linux kernel cryptographic socket race condition vulnerability CVE-2025-39964 to KEV catalog following active root privilege escalation attacks.
CST Newsroom18 Sep 202611 min read
ThreatsCloud & SaaSHigh
Linux Kernel ebtables SNAT Out-of-Bounds Write Flaw Exploited in Active Attacks
CISA adds Linux kernel ebtables SNAT memory corruption flaw CVE-2026-53266 (CVSS 8.8) to KEV catalog following active hypervisor privilege escalation.
Mei-Lin Chen18 Sep 202610 min read
ThreatsCloud & SaaSHigh
Critical Ubiquiti UniFi OS Path Traversal Flaw Exploited to Hijack Enterprise Gateways
CISA orders federal agencies to patch Ubiquiti UniFi OS vulnerability CVE-2026-34909 enabling unauthenticated network configuration extraction and takeover.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSHigh
Cloud Container Escape: Linux Kernel cgroups Flaw CVE-2022-0492 Weaponized in Cloud Attacks
CISA adds Linux kernel cgroups v1 release_agent vulnerability CVE-2022-0492 to KEV catalog as threat actors weaponize container breakout exploits.
CST Newsroom18 Sep 202611 min read
InsightsCloud & SaaS
Google Cloud Security Advisory: GCP Guest OS Login Privilege Escalation Flaw Dissected
Technical analysis of Google Cloud Platform guest-oslogin flaw CVE-2020-8903 enabling non-administrative users to escalate privileges to root.
Mei-Lin Chen18 Sep 202610 min read
ThreatsCloud & SaaSCritical
Check Point Security Gateways Targeted in Zero-Day VPN Credential Theft Attacks
CISA orders emergency patching of Check Point Security Gateway flaw CVE-2026-50751 enabling unauthenticated perimeter VPN bypass and network takeover.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSCritical
Cisco Catalyst SD-WAN Manager Critical Directory Traversal Flaws Weaponized in Active Attacks
CISA orders emergency remediation of Cisco Catalyst SD-WAN Manager flaws CVE-2026-20262 and CVE-2026-20245 enabling remote administrative root takeover.
CST Newsroom18 Sep 202611 min read
InsightsCloud & SaaS
Azure Security Advisory: Cloud Foundry BOSH CPI Stemcell Code Injection Flaw Dissected
Technical analysis of Azure Cloud Provider Interface vulnerability CVE-2017-4964 enabling arbitrary code injection into virtual machines during deployment.
Mei-Lin Chen18 Sep 202610 min read
ThreatsCloud & SaaSCritical
Splunk Enterprise Critical Authentication Bypass Flaw Exploited in Active Corporate Infiltration Attacks
CISA adds Splunk Enterprise vulnerability CVE-2026-20253 (CVSS 9.8) to KEV catalog following active exploitation targeting enterprise SIEM clusters.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSCritical
Ivanti Sentry Critical OS Command Injection Flaw Exploited in Perimeter Infiltration Attacks
CISA adds Ivanti Sentry vulnerability CVE-2026-10520 (CVSS 9.8) to KEV catalog following active zero-day exploitation against corporate mobile gateways.
CST Newsroom18 Sep 202611 min read
InsightsCloud & SaaS
India DPDP Act Enters Phase 2: DPBI Enforcement, Mandatory Breach Notification & ₹250 Cr Penalties
India initiates DPDP Act Phase 2 enforcement establishing Data Protection Board inquiries, mandatory breach disclosures, and penalties up to ₹250 Crore.
Daniel Okafor18 Sep 202612 min read
ThreatsCloud & SaaSHigh
Cisco IOS Cross-Site Request Forgery Flaw Exploited to Hijack Core Enterprise Routers
CISA adds Cisco IOS HTTP server CSRF flaw CVE-2008-4128 to KEV catalog following active in-the-wild exploitation to alter router configuration registers.
CST Newsroom18 Sep 202611 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Server Critical Deserialization & Auth Bypass Flaws Under Active Cyberattack
CISA orders federal agencies to patch critical Microsoft SharePoint vulnerabilities CVE-2026-58644 and CVE-2026-56164 enabling unauthenticated remote code execution.
Priya Raman18 Sep 202612 min read
ThreatsIndustrial & OTHigh
KNX Building Automation Protocol Denial-of-Service Flaw Exploited Against Critical Infrastructure
CISA adds KNX industrial building automation protocol vulnerability CVE-2023-4346 to KEV catalog following active exploitation against critical OT facilities.
Tom Verhoeven18 Sep 202610 min read
ResearchCloud & SaaS
Langflow AI Pipeline Remote Code Execution Flaws Exploited in Enterprise LLM Deployments
CISA adds critical Langflow AI vulnerabilities CVE-2026-0770 and CVE-2026-55255 to KEV catalog as threat actors weaponize agentic pipeline execution flaws.
Aisha Noor18 Sep 202611 min read
NewsCloud & SaaS
CenterPoint Energy Form 8-K Disclosure: Unauthorized Access to Customer Accounts via External Web Portal
CenterPoint Energy files Form 8-K disclosing an unauthorized intrusion into customer account systems via external-facing web portal infrastructure.
CST Newsroom17 Sep 202614 min read
ResearchCloud & SaaS
Agentic AI Security Breakdown: How Indirect Prompt Injections Hijack Autonomous Tool-Calling Agents
Analysis of emerging frontier AI threat vectors: how indirect prompt injections in untrusted documents hijack tool-calling autonomous LLM agents.
Priya Raman17 Sep 202614 min read
ThreatsCloud & SaaSHigh
AWS Security Advisory: Linux Kernel vhost vring Cache Corruption Flaw CVE-2026-74580 Patched via Livepatch
AWS publishes security advisory ALAS2023LIVEPATCH-2026-343 addressing a Linux kernel vhost vring metadata cache corruption vulnerability (CVE-2026-74580).
Daniel Okafor17 Sep 202613 min read
ThreatsCloud & SaaSCritical
Adobe ColdFusion Critical Path Traversal Flaw CVE-2026-48282 Exploited in Active Attacks
CISA incorporates Adobe ColdFusion path traversal vulnerability CVE-2026-48282 (CVSS 9.8) into KEV catalog following active exploitation against enterprise application servers.
Mei-Lin Chen17 Sep 202614 min read

Threat scope

DevOps pipelines, cloud IAM, package registries, Kubernetes clusters and zero-day vulnerabilities.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

Exploited CVEs, with affected products and patch status
Patch priorities ranked by real-world exploitation
Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issue Privacy policy