Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Archive

Latest coverage, page 6

Everything we've published, newest first, across threats, news, research, analysis and guides.

324 articlesUpdated 28 Sep 2026Page 6 of 14

ThreatsCloud & SaaSCritical
Security Researchers Leverage Claude Opus 5 to Defeat ASLR in libheif RCE and Infiltrate OpenAI Perimeter
Hacktron AI researchers demonstrate how Claude Opus 5 synthesized an ASLR-bypassing libheif exploit to breach OpenAI forum and pivot to internal repos.
CST Newsroom21 Sep 202614 min read
ThreatsIndustrial & OTCritical
Hitachi Energy FACTS Control Platform Flaws Permit Remote Code Injection Across Electric Transmission Grids
Hitachi Energy notification 8DBD000229 details critical CVSS 9.9 flaws in FACTS Control Platform GWS enabling remote code injection in power grid SCADA.
CST Newsroom21 Sep 202614 min read
ThreatsCloud & SaaSHigh
Azure Connected Machine Agent Flaw CVE-2026-47632 Enables Local Privilege Escalation Across Hybrid Server Workloads
Microsoft patches high-severity flaw CVE-2026-47632 in Azure Connected Machine Agent allowing local privilege escalation on Azure Arc hybrid endpoints.
Mei-Lin Chen21 Sep 202613 min read
ThreatsCloud & SaaSHigh
CrewAI CodeInterpreter Sandbox Escape Vulnerability CVE-2026-2275 Enables Remote Command Injection in Multi-Agent Pipelines
CrewAI maintainers resolve vulnerability CVE-2026-2275 in CodeInterpreter tool allowing arbitrary host command execution via malicious Python payloads.
CST Newsroom21 Sep 202612 min read
ThreatsCloud & SaaSCritical
Google Cloud Application Integration QueryEngineTask Flaw Permits Cross-Project Authorization Bypass
Google Cloud resolves critical flaw CVE-2026-12710 in Application Integration QueryEngineTask allowing cross-tenant authorization bypass and IAM escalation.
Mei-Lin Chen20 Sep 202613 min read
ThreatsCloud & SaaSHigh
Open WebUI Code Execution Guardrail Bypass Enables Remote Command Injection in Enterprise LLM Workspaces
Open WebUI security release patches high-severity vulnerability CVE-2026-45672 allowing sandbox escapes and arbitrary host execution via crafted pipeline code.
CST Newsroom20 Sep 202612 min read
ThreatsIndustrial & OTHigh
Schneider Electric EcoStruxure IT Data Center Expert Flaw Exposes Critical Infrastructure Telemetry to XXE Attacks
Schneider Electric advisory SEVD-2026-160-01 details high-severity XXE flaw CVE-2026-8045 in EcoStruxure IT Data Center Expert enabling data exfiltration.
CST Newsroom20 Sep 202613 min read
ThreatsCloud & SaaSCritical
Critical HPE EdgeConnect SD-WAN Orchestrator Authentication Bypass Exposes Enterprise Network Fabrics
HPE Aruba Networking resolves maximum-severity CVSS 9.8 flaw CVE-2026-63455 in EdgeConnect SD-WAN Orchestrator allowing unauthenticated network takeover.
Mei-Lin Chen20 Sep 202614 min read
ThreatsCloud & SaaSHigh
Amazon DynamoDB Model Context Protocol Server Code Injection Flaw Enables Arbitrary Host Execution
AWS releases security bulletin 2026-097-AWS for CVE-2026-85654 in DynamoDB MCP server, where template injection enables arbitrary host command execution.
CST Newsroom20 Sep 202614 min read
ThreatsIndustrial & OTHigh
Siemens SICAM 8 Remote Parameterization Resource Exhaustion Flaw Disables Substation Automation Controllers
Siemens releases advisory SSA-246443 for high-severity flaw CVE-2026-27663 in SICAM 8 controllers, where resource exhaustion halts substation automation.
CST Newsroom20 Sep 202613 min read
ThreatsCloud & SaaSCritical
Microsoft Azure Active Directory B2C Authentication Bypass Flaw Enables Remote Privilege Escalation
Microsoft fixes critical CVSS 9.1 flaw CVE-2026-33843 in Azure AD B2C and Microsoft Entra ID allowing unauthenticated network attackers to elevate privileges.
Mei-Lin Chen20 Sep 202614 min read
ThreatsIndustrial & OTCritical
Critical Schneider Electric Modicon M580 Controllers Authentication Flaw Risks Industrial Process Takeover
Schneider Electric issues advisory SEVD-2026-251-04 for critical CVSS 9.2 flaw CVE-2026-3869 in Modicon M580 controllers enabling unauthenticated process takeover.
CST Newsroom20 Sep 202615 min read
ThreatsCloud & SaaSCritical
Critical vLLM Multimodal Video Parser Buffer Overflow Flaw Enables Remote Root Code Execution
vLLM maintainers and NIST disclose critical CVSS 9.8 flaw CVE-2026-22778 in multimodal video processing allowing unauthenticated remote root takeover of GPU clusters.
Daniel Okafor20 Sep 202614 min read
ThreatsIndustrial & OTHigh
Rockwell Automation FactoryTalk Activation Manager Flaw Enables Local SYSTEM Privilege Escalation
Rockwell Automation issues advisory SD1799 for CVE-2026-16675 in FactoryTalk Activation Manager, allowing authenticated operators to seize SYSTEM privileges.
CST Newsroom20 Sep 202613 min read
ThreatsCloud & SaaSCritical
Linux Kernel Fragnesia Flaw Weaponized for GKE Container Escapes via Socket Buffer Page-Cache Overwrite
Google Cloud and Linux maintainers patch CVE-2026-46300 (Fragnesia), a critical ESP-in-TCP kernel bug enabling container breakout to GKE node root.
Daniel Okafor20 Sep 202615 min read
ThreatsCloud & SaaSCritical
LiteLLM Pre-Authentication SQL Injection Flaw Exposes Enterprise Master Keys and AI Model Routing Gateways
LiteLLM releases urgent patch for CVE-2026-42208, a pre-auth SQL injection flaw allowing unauthenticated remote attackers to dump LLM proxy master credentials.
CST Newsroom20 Sep 202614 min read
ThreatsCloud & SaaSCritical
Check Point Security Management Buffer Overflow Flaw Enables Unauthenticated Remote Root Code Execution
Check Point and CERT-In issue emergency alerts for critical CVSS 9.8 flaw CVE-2026-91843 in Security Management and Log Servers allowing remote unauthenticated root compromise.
Mei-Lin Chen20 Sep 202614 min read
ThreatsCloud & SaaSHigh
Amazon SSM Agent Path Traversal Flaw Enables Root Host Takeover via Malicious S3 Object Keys
AWS resolves high-severity CVSS 8.8 flaw CVE-2026-81849 in amazon-ssm-agent where crafted S3 object keys allow authenticated IAM actors to overwrite root host files.
Daniel Okafor20 Sep 202612 min read
InsightsCloud & SaaS
Malicious MCP Servers Exploit OAuth Metadata Flaw in Rust SDK to Hijack Enterprise Agent Tokens
Critical OAuth metadata flaw CVE-2026-63127 in rmcp Rust SDK allows rogue Model Context Protocol servers to capture enterprise agent tokens and impersonate identities.
Priya Raman20 Sep 202613 min read
ThreatsIndustrial & OTCritical
Critical Flaws in Digital Watchdog VMAX Recorders Enable Unauthenticated Remote Root Takeover
CISA releases advisory ICSA-26-258-01 warning of critical vulnerabilities in Digital Watchdog VMAX DVR and NVR recorders allowing unauthenticated remote root code execution.
Mei-Lin Chen20 Sep 202612 min read
InsightsBanking & Fintech
EU DORA Enforcement Shifts to Live Production Penetration Testing and Third-Party Oversight
European financial regulators transition DORA enforcement to mandatory Threat-Led Penetration Testing (TLPT) and direct scrutiny of Critical ICT Third-Party Providers.
Priya Raman20 Sep 202613 min read
ThreatsCloud & SaaSHigh
Flowise SSRF Vulnerability Bypasses Network Guardrails to Steal Cloud Instance Credentials
Vulnerability CVE-2026-67620 in Flowise AI workflow builder allows attackers to bypass SSRF deny-lists and extract cloud instance metadata credentials from OCI and Alibaba Cloud.
Daniel Okafor20 Sep 202611 min read
ThreatsCloud & SaaSHigh
OpenSearch Dashboards Route Handler Flaw Triggers Denial of Service Across Cloud Clusters
AWS and OpenSearch release security advisories for high-severity vulnerability CVE-2026-75897 in OpenSearch Dashboards enabling unauthenticated remote denial of service.
Priya Raman19 Sep 202610 min read
ThreatsIndustrial & OTCritical
Threat Actors Weaponize AI Tooling and S7comm to Target Siemens S7 Industrial Controllers
CISA, NSA, and the FBI issue joint advisory AA26-231A warning of active campaigns targeting Siemens S7 series PLCs using automated S7comm protocol exploitation.
Mei-Lin Chen19 Sep 202613 min read