Vulnerabilities
$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI infrastructure and coding...
Hi, what are you looking for?
SecurityWeek
ICS/OT
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
Vulnerabilities
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
Vulnerabilities
Threat actors have been observed delivering cryptocurrency miners and proxy software.
Vulnerabilities
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
Vulnerabilities
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution.
Vulnerabilities
Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products.
Vulnerabilities
Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges.
Government
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
Vulnerabilities
Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track.
Mobile & Wireless
The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.
Vulnerabilities
Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory.
Artificial Intelligence
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP).
Vulnerabilities
CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.
Vulnerabilities
Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched.
Vulnerabilities
The bugs could lead to authentication bypass, shell command execution, and memory corruption.
Malware & Threats
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
Vulnerabilities
CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
Vulnerabilities
Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.
Artificial Intelligence
The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.
Vulnerabilities
The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges.
Artificial Intelligence
Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.
Vulnerabilities
WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS.
Vulnerabilities
Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)