1,437 articles
OT / SCADACISA issues advisory ICSA-26-258-04 warning of insufficiently protected credentials in Schneider Electric SCADAPack x70 Remote Telemetry Units (CVE-2026-81861).
Active ExploitCISA incorporates Adobe ColdFusion path traversal vulnerability CVE-2026-48282 (CVSS 9.8) into KEV catalog following active exploitation against enterprise application servers.
CiscoCISA adds Cisco Unified Communications Manager vulnerability CVE-2026-20230 (CVSS 8.5) to KEV catalog following active in-the-wild enterprise telephony attacks.
Threat IntelCISA adds Ubiquiti UniFi OS vulnerability CVE-2026-34910 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation against network edge gateways.
CMS SecurityCISA incorporates WordPress Core vulnerabilities CVE-2026-60137 and CVE-2026-63030 (CVSS 9.8) into KEV catalog following active in-the-wild web attacks.
LinuxCISA adds Red Hat ABRT vulnerability CVE-2015-5287 (CVSS 7.8) to KEV catalog following active exploitation against enterprise Linux host infrastructure.
Threat IntelCISA adds SimpleHelp remote support platform vulnerability CVE-2026-48558 (CVSS 9.8) to KEV catalog following active exploitation against enterprise networks.
Active ExploitCISA adds N-able N-central vulnerability CVE-2026-18577 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against MSP management infrastructure.
LinuxCISA adds Red Hat libuser vulnerability CVE-2015-3246 (CVSS 8.8) to KEV catalog following active in-the-wild exploitation for root privilege escalation.
Threat IntelCISA adds DD-WRT gateway vulnerability CVE-2021-27137 (CVSS 9.8) to KEV catalog following active weaponization by botnets targeting network perimeter routers.
MicrosoftCISA adds Microsoft SQL Server vulnerability CVE-2019-1068 (CVSS 9.8) to KEV catalog following active in-the-wild exploitation against enterprise database clusters.
Threat IntelCISA mandates urgent remediation of TrueConf Server vulnerability CVE-2026-72529 (CVSS 9.8) exploited in the wild to bypass administrative access controls.
FortinetCISA adds Fortinet FortiSandbox vulnerabilities CVE-2026-25089 and CVE-2026-39808 (CVSS 9.8) to KEV following active attacks against enterprise security fabrics.
Active ExploitCISA adds Acronis Backup plugin vulnerability CVE-2026-87886 (CVSS 9.8) to its KEV catalog following active exploitation against cPanel and Plesk hosting infrastructure.
OT / SCADACISA ICS-CERT advisory ICSA-26-258-05 alerts power grid operators to critical denial of service flaws in Siemens Reyrolle 7SR5 electrical protection relays.
LinuxCISA adds Linux kernel watch queue vulnerability CVE-2022-0995 to its KEV catalog following widespread weaponization in cloud container breakout attacks.
Threat IntelAnthropic threat intelligence reveals nation-state groups, including Midnight Blizzard, attempted to weaponize Claude to automate malware obfuscation and EDR evasion.
Agentic AIOpenAI releases o1 red-teaming telemetry detailing chain-of-thought safety boundaries, autonomous cyber task planning risks, and the formation of the AI-ISAC.
CiscoCISA orders emergency patching of Cisco Identity Services Engine vulnerability CVE-2026-76460 (CVSS 9.8) enabling unauthenticated remote network policy takeover.
Threat IntelCISA flags Apache Tomcat vulnerability CVE-2026-34486 exploited in enterprise intrusions to intercept unencrypted session tokens and hijack authenticated user access.
MicrosoftTechnical breakdown of cloud workload stemcell isolation defects, container escape vectors, and hypervisor boundary hardening across AWS and Microsoft Azure.
GoogleCISA adds Google Pixel baseband modem flaw CVE-2026-58704 to its KEV catalog following active zero-day exploitation against high-value target devices.
OT / SCADACISA ICS-CERT advisory ICSA-26-258-01 prompts urgent implementation of IEC 62443-3-2 zone segmentation and Purdue Model controls in industrial networks.
MicrosoftDigital forensics analysis dissects how threat actors leverage leaked cloud credentials and cross-account IAM role assumptions to exfiltrate enterprise storage.