Resources
Cisco Patches UCS Central Flaw CVE-2026-76506 and ISE Bugs
Cisco patched UCS Central flaw CVE-2026-76506, an ISE certificate authorization bypass and a Unified CM XSS bug. No workarounds exist and no attacks are known.
Citrix Fixes CVSS 9.8 XenServer Flaw and Brotli Bug in Scout
Citrix patched a CVSS 9.8 XenServer race condition, CVE-2026-98432, plus pre-boot and Brotli decoder flaws. The company reports no attacks against customers.
Apache Discloses 35 Flaws Across Nine Projects, ZooKeeper Hit
Apache disclosed 35 vulnerabilities across nine projects, 20 rated high, including ZooKeeper, OpenOffice and ActiveMQ. No exploitation has been confirmed.
ASUS Patches AiCloud Root Flaw CVE-2026-84730 in Four Alerts
ASUS issued four security advisories, including AiCloud router flaw CVE-2026-84730 that gives an adjacent attacker root shell access, plus two driver bugs.
OpenAI AI Pipeline Built 948 Linux Kernel Root Exploits
OpenAI says an agentic pipeline reproduced 1,724 Linux kernel flaws and built 948 working root exploits at about $1,279 each, in a run lasting 30 ...
CISA Adds WordPress Core Flaw CVE-2026-119977 to KEV Catalog
CISA lists WordPress race-condition RCE CVE-2026-119977 as actively exploited, and Wordfence reports 12,632 blocked attack attempts in the last 24 hours.
Rails Patches 21 Flaws, Including CVSS 9.8 Active Storage Bug
Rails 8.0.5.2 and 8.1.4.1 fix 21 vulnerabilities, including a CVSS 9.8 Active Storage flaw that lets unauthenticated attackers write files via image upload.
JPCERT/CC Warns Airbyte CVSS 9.9 Flaw Is Exploited in the Wild
JPCERT/CC warns that a CVSS 9.9 code-execution flaw in self-managed Airbyte before 2.2.0 is being exploited in the wild; Airbyte Cloud users need no action.
Public Exploit Released for Puppet Server RCE CVE-2026-115731
A working exploit is public for CVE-2026-115731, a CVSS 9.4 remote code execution flaw in Puppet Server and OpenVox that can hand attackers the CA ...
SonicWall Says Retire GMS as Two Critical Flaws Stay Unpatched
SonicWall disclosed CVE-2026-109593 and CVE-2026-109594 in end-of-life GMS 9.5.2 and earlier, offers no patch, and tells administrators to migrate off it.
Weekly Newsletter
Weekly Cybersecurity Newsletter: 14th to 18th August
Explore our latest cybersecurity podcast episodes featuring ransomware attacks, phishing campaigns, corporate breaches, legal showdowns, and deep dives into evolving threats and digital defenses.
This Week In Cybersecurity: 23rd June to 27th June
News Stories New ‘FileFix’ Attack Exploits Windows File Explorer to Deliver Stealthy Commands Threat actors use the search-ms URI protocol ...
This Week In Cybersecurity: 26th to 30th May, 2025
"Cybersecurity threats escalate as ransomware attacks target major organizations, exposing sensitive data and highlighting vulnerabilities in systems across various industries. Stay informed."
This Week In Cybersecurity: 19th to 23rd May, 2025
This week, significant cybersecurity incidents include ransomware attacks, data breaches affecting major organizations, and ongoing threats from state-sponsored groups, highlighting vulnerabilities across various sectors.
This Week In Cybersecurity: 21st – 25th April, 2025
Targeted malware, ransomware, phishing, and ad fraud hit SK Telecom, Baltimore schools, Google, and more this week—exposing critical data and abusing trusted systems.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.