Vulnerabilities
The flaw allows attackers to send files and execute them without authorization through an active remote session.
Hi, what are you looking for?
SecurityWeek
ICS/OT
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
Vulnerabilities
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
Vulnerabilities
Threat actors have been observed delivering cryptocurrency miners and proxy software.
Vulnerabilities
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
Vulnerabilities
Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments.
Vulnerabilities
The critical-severity path traversal flaw allows unauthenticated attackers to read arbitrary files from the GitLab server.
Vulnerabilities
Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution.
Vulnerabilities
A Russian threat actor used AI to build, test, and deploy exploits against hundreds of organizations worldwide.
Artificial Intelligence
Join the webinar for a focused, 20-minute discussion on Frontier Pace Governance, an approach to balancing automation, policy, and business risk as IT operations accelerate.
Vulnerabilities
Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.
Vulnerabilities
Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.
Endpoint Security
The exploit provides full System privileges on Windows machines running the September 2026 patches.
Malware & Threats
The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.
Mobile & Wireless
The security updates resolve critical flaws across Android’s Framework, System, and Kernel components.
Vulnerabilities
Major chipmakers announced patches for vulnerabilities recently discovered in their products.
Network Security
The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic.
ICS/OT
AVEVA and Rockwell Automation also released patches for vulnerabilities affecting industrial control system products.
Network Security
Six critical vulnerabilities in Neurons for ITSM could enable remote code execution, while Sentry and EPMM received patches for authentication bypass flaws.
Vulnerabilities
The Chrome update includes 230 security fixes, and users are advised to update their browsers as soon as possible.
Vulnerabilities
The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities.
Vulnerabilities
Tracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code.
Vulnerabilities
Affecting the SAP kernel code, the flaw allows unauthenticated, remote attackers to run arbitrary commands, recover secrets, and modify data.
Network Security
Dubbed MikroTrick, the bugs allow attackers to bypass authentication, overwrite configuration files, and take over devices.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)