Eduard Kovacs

CVE-2026-60004 is a remote code execution vulnerability patched by Gitea developers in late July with the release of version 1.27.1.

TRACE was developed by AMD, Intel, Microsoft, OPAQUE, and TII and contributed to the Linux Foundation.

CVE-2026-61979 and CVE-2026-15981 are authentication bypass vulnerabilities affecting the MiniOrange SAML 2.0 SSO plugin.

When Android users get a call from a non-contact, they will see more information about the caller, including their country.

Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices.

The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers.

A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.

More than 200 vulnerabilities have been patched to date this year, compared to only 16 in 2025 and 22 in 2024. 

Juan Manuel Gouveia-Aguilera has been sentenced to 8 years in prison for his role in an ATM jackpotting scheme that caused millions in losses.

The private equity firm appears to have been targeted as part of a campaign focusing on major financial companies.

Claude Security, currently in public beta for Claude Enterprise customers, now runs codebase scans on Mythos 5.

The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware.

Two industry surveys released this week by Kiteworks and CyberSheath paint a consistent picture of the defense industrial base.

Exploitation of the Zimbra Collaboration vulnerability CVE-2026-73570 has been observed by Poland’s CERT Polska.

The action taken by OpenAI comes in light of the Hugging Face incident and the discovery of the Astra model’s advanced capabilities. 

A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.

The cybercrime gang has listed major companies such as Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision.

The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact.

Fortinet will use Virtue AI technology to enhance its AI security portfolio, including for AI models, applications, and agentic systems.

The AI security testing firm has shared information on a recently disclosed incident involving Anthropic AI models.