Mobile & Wireless
The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Identity & Access
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
Vulnerabilities
The flaws can be exploited for remote code execution, authentication bypass, and EncryptInterceptor bypass.
Network Security
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
Artificial Intelligence
A crafted prompt to a low-privilege Google ADK agent could be used to pass a malicious hand-off comment to a privileged agent.
Vulnerabilities
Over 24,000 internet-accessible server-management interfaces disclose authentication hashes before login.
Vulnerabilities
The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000.
Vulnerabilities
The N‑central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.
Ransomware
The INC Ransomware gang has been targeting vulnerable SMA1000 appliances for root access and lateral movement.
Vulnerabilities
The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE).
Artificial Intelligence
The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase.
Cloud Security
Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access.
Vulnerabilities
Tracked as CVE-2026-63077, the security defect can be exploited without authentication via the agent polling protocol.
Artificial Intelligence
Unauthenticated attackers could send HTTP requests to an exposed endpoint to execute commands inside the MCP bridge container.
Vulnerabilities
The major browser update resolves roughly 80 critical- and high-severity security defects.
Vulnerabilities
The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.
Vulnerabilities
A total of five vulnerabilities have been patched in VMware ESXi, vCenter, Workstation, and Fusion.
Artificial Intelligence
The OpenAI models targeted services beyond Hugging Face as they attempted to solve the tasks they were given.
Endpoint Security
Apple announced that dozens of vulnerabilities have been patched in each of its operating systems.
Funding/M&A
Act Security tackles the spiraling patch problem caused by AI’s ability to find new vulnerabilities in existing cloud environments.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)