SecurityWeek

The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.

Attackers with Author-level user or higher permissions could exploit the flaw via malicious Postscript files.

The Israeli company has nearly $2 billion in total assets under management since 2014.

The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance.

Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements.

Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code.

Dropped on Patch Tuesday, the exploit allows any user to spawn a shell with System privileges.

The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.

The cybersecurity startup will use the fresh investment to scale its product, engineering, sales, and marketing teams.

Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.

Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.

Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers.

Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.

LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users.

The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.