
Archive
Latest coverage, page 5
Everything we've published, newest first, across threats, news, research, analysis and guides.
324 articles
NewsHealthcare & PharmaCST Newsroom
ThreatsIndustrial & OTHighBransys Electronic Logging Devices Exposed to Fleet Telemetry Hijack via Hardcoded MQTT Credentials Flaw CVE-2026-86520
CST Newsroom
ThreatsCloud & SaaSHighZyxel GS1900 Smart Managed Switches Exploited in the Wild via CGI Stack Buffer Overflow Flaw CVE-2026-7273
Daniel Okafor
ThreatsCloud & SaaSHighCrewAI Multi-Agent Framework Flaw CVE-2026-37007 Allows Remote Code Execution via Path Traversal Tool Poisoning
Mei-Lin Chen
ThreatsCloud & SaaSCriticalCritical Oracle WebLogic Server Flaw CVE-2026-83021 Allows Unauthenticated Remote Code Execution Across Enterprise Java Clusters
Priya Raman
ThreatsCloud & SaaSHighMicrosoft Azure CLI Command Injection Vulnerability CVE-2026-83948 Exposes Cloud CI/CD Automation Runners
Aisha Noor
NewsHealthcare & PharmaNovocure SEC Form 8-K Discloses Material Network Breach Exposing Oncology Device Systems and Clinical Records
Priya Raman
ThreatsIndustrial & OTHighRockwell Automation Logix Controllers Flaw CVE-2026-9637 Triggers Fatal Faults via Malicious CIP Message Frames
Daniel Okafor
ThreatsCloud & SaaSHighTASK#STOMP Malware Campaign Deploys Living-off-the-Land PowerShell Backdoor with Timestomping and Redundant Task Scheduler Persistence
Daniel Okafor
ThreatsCloud & SaaSCriticalLangflow Custom Component Code Validator Flaw CVE-2026-0768 Weaponized for Remote Code Execution Across AI Pipelines
Mei-Lin Chen
ThreatsCloud & SaaSHighcontainerd CRI Checkpoint Flaw CVE-2026-50195 Enables Local Node Image Cache Poisoning Across Kubernetes Clusters
Aisha Noor
ThreatsIndustrial & OTHighSiemens Desigo CC Building Automation Platform Flaw CVE-2026-34223 Exposes Supervisory Workstations to Arbitrary Script Execution
Priya Raman
ThreatsCloud & SaaSHighAWS Security Agent and MCP Server Flaws CVE-2026-87912 and CVE-2026-87913 Allow S3 Bucket Squatting to Intercept Private Source Code
Aisha Noor
NewsHealthcare & PharmaBoston Scientific SEC Form 8-K Discloses Global Medical Device Manufacturing Outage Following Material Cyberattack
Priya Raman
ThreatsCloud & SaaSCriticalvLLM Inference Server Authentication Bypass Flaw CVE-2026-48746 Exposes Enterprise Model Endpoints Without API Keys
Mei-Lin Chen
ThreatsCloud & SaaSHighLMDeploy Vision-Language Model Flaw CVE-2026-33626 Exploited in the Wild to Breach Internal Cloud Networks
Mei-Lin Chen
ThreatsCloud & SaaSHighGoogle Cloud Gemini Agent App Builder Flaw CVE-2026-19486 Leaks Compute Engine Service Account Tokens
Aisha Noor
ThreatsIndustrial & OTCriticalSiemens Industrial Edge Management Flaw CVE-2026-18963 Enables Remote Takeover of Factory Control Systems
Daniel Okafor
ThreatsCloud & SaaSCriticalLiteLLM MCP Server Creation Flaw CVE-2026-30623 Enables Remote Code Execution via Malicious Tool Configurations
Mei-Lin Chen
ThreatsCloud & SaaSCriticalAzure HorizonDB Critical Flaw CVE-2026-48567 Allows Complete Authentication Bypass via Token Spoofing
Aisha Noor
ThreatsIndustrial & OTHighSchneider Electric Modicon M340 PLCs and Ethernet Modules Vulnerable to Remote Denial of Service via FTP Flaw CVE-2025-6625
Daniel Okafor
ThreatsCloud & SaaSHighAmazon ECS Agent Flaw CVE-2026-7461 Permits Command Injection and Host Takeover on Windows Clusters
Mei-Lin Chen
ThreatsCloud & SaaSCriticalCritical Ollama GGUF Loader Flaw CVE-2026-7482 Leaks API Keys and Enterprise Inference Memory
CST Newsroom
ThreatsIndustrial & OTHighRockwell Automation Redundancy Tool Flaws Permit Local Privilege Escalation on Industrial Control Workstations
CST Newsroom