SecurityWeek

CISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog.

A major overhaul of the Model Context Protocol shifts critical security responsibilities from the protocol itself to developers and platform operators.

Martin brings experience from Coinbase, Palantir, Amazon, and the U.S. Army to lead Uber's cybersecurity and enterprise security organization.

The startup’s platform functions as a secure control layer, aiming to secure AI tools across enterprises.

Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.

The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project.

The latest GitLab CE/EE updates address 13 vulnerabilities, including three high-severity defects.

The latest version of the open source data transfer tool resolves 18 medium and low-severity vulnerabilities.

The 2026 Industrial Control Systems (ICS) Cybersecurity Conference takes place October 6-8, 2026, at the W Nashville.

The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks.

More than half of the bugs are use-after-free defects, which can potentially lead to remote code execution.

CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.

From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.

Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies.

The new framework seeks to help security teams identify which software supply chain vulnerabilities pose the greatest operational, safety, and business risks in AI-driven environments.

A standard non-admin account is sufficient to conduct an attack that exploits legitimate OS behavior rather than software vulnerabilities.

Nathan Austad has been ordered to pay roughly $1.8 million in forfeiture and restitution, and the sentence also includes 3 years of supervised release. 

The flaws allow remote, unauthenticated attackers to make system changes, access underlying accounts, and inject commands.

Context is the central plank of AI in general, and agentic AI in particular. If an AI system doesn’t have the correct context, it cannot make the correct decisions.

Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta.