Vulnerabilities
The browser update resolves several critical-severity memory safety and memory corruption flaws.
Hi, what are you looking for?
SecurityWeek
Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Vulnerabilities
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
Vulnerabilities
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
Vulnerabilities
The nine critical security defects could be exploited for arbitrary code execution and privilege escalation.
Vulnerabilities
Remote attackers could trigger the critical-severity flaw to access privileged internal functionality.
Vulnerabilities
Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution.
Vulnerabilities
The critical-severity flaw could allow unauthenticated attackers to upload and execute arbitrary scripts.
Vulnerabilities
Abdelhamid Naceri, a former Microsoft Germany employee, is the exploit leaker Nightmare Eclipse, aka Chaotic Eclipse.
Vulnerabilities
A Chinese threat actor has exploited the bug to exfiltrate sensitive information from nearly 1,000 ZyXEL switches.
Vulnerabilities
The bug lets attackers automatically install and preview themes and could lead to remote code execution.
Vulnerabilities
Attackers could exploit the flaws to cause denial-of-service conditions, disclose memory, or modify memory.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug...
Artificial Intelligence
Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.
Vulnerabilities
CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.
Endpoint Security
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Vulnerabilities
Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process.
Vulnerabilities
The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution.
Vulnerabilities
Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)