Vulnerabilities
Attackers could exploit the flaws to cause denial-of-service conditions, disclose memory, or modify memory.
Hi, what are you looking for?
SecurityWeek
ICS/OT
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
Vulnerabilities
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
Vulnerabilities
Threat actors have been observed delivering cryptocurrency miners and proxy software.
Vulnerabilities
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug...
Artificial Intelligence
Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.
Vulnerabilities
CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.
Endpoint Security
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.
Government
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Vulnerabilities
Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process.
Vulnerabilities
The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution.
Vulnerabilities
Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.
Mobile & Wireless
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
Vulnerabilities
Vulnerabilities in The Events Calendar can provide attackers with remote code execution capabilities.
Vulnerabilities
Google resolved 42 security defects in Chrome, and Mozilla fixed 73 bugs in Firefox.
Vulnerabilities
CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.
Vulnerabilities
The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data.
Vulnerabilities
The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws.
Vulnerabilities
AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage.
Vulnerabilities
The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks.
Email Security
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
Nation-State
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.
Vulnerabilities
The vulnerabilities can allow attackers to bypass authentication and elevate their privileges to administrator.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)