News

A newly discovered Apache Fesod SSRF vulnerability (CVE-2026-49328) has emerged, exposing enterprise systems to unauthorized access due to improper validation of inbound web requests in its UrlImageConverter component. The security flaw allows attackers to…

Dashlane reported a brute-force attack that resulted in the download of encrypted vaults of under 20 user accounts. Despite the breach, the company stated that customer passwords remain safe due to encryption measures in place. Users have been advised to…

The article discusses AMD's recent extension of support for its AM5 platform until 2029, following the launch of the AM5 architecture in 2022. This decision reflects AMD's commitment to platform longevity and backward compatibility, promoting cost-effective…

A critical security vulnerability (CVE-2026-5386) has been identified in KMW CCTV cameras, impacting the KM-IP521 and KM-IP421 models. This vulnerability has a CVSS score of 9.1, allowing unauthorized users to change administrative passwords and access…

Anthropic is progressing toward a public listing with its confidential S-1 filing confirmed by the SEC, moving beyond traditional venture capital to Wall Street. Financials are undisclosed, but analysts speculate a potential $10.9 billion in quarterly…

The page discusses critical security vulnerabilities identified in the Fleet GitOps platform, notably affecting multi-tenancy setups. Key vulnerabilities include: 1. **CVE-2026-44935** - Cross namespace secret disclosure, allowing unauthorized access to…

A critical security alert highlights vulnerabilities in the Casdoor identity and access management system, affecting versions 2.362.0 and earlier. Key vulnerabilities include: 1) CVE-2026-9090, where attackers exploit a flaw in SAML certificate verification…

This content features an update from the Internet Storm Center (ISC) for June 2, 2026, managed by handler Brad Duncan. The current threat level is indicated as green, suggesting low risk. Additional resources include links to classes offered by Dr. Johannes…

A critical Android zero-day flaw has been identified, prompting Google to issue a significant security patch. This update addresses vulnerabilities including CVE-2025-48595, a notable memory management error that can be exploited for code execution. The June…

The article highlights multiple high-severity vulnerabilities recently discovered in the Rancher container management platform, which pose significant risks to Kubernetes environments. Key points include: 1. **CVE-2026-41052**: A privilege escalation flaw…

The page discusses the importance of defining and adhering to core values in cybersecurity operations (SecOps). It emphasizes that having consistent values is crucial for decision-making and building trust among stakeholders, especially in complex…

The content reports a critical security vulnerability in TP-Link routers, specifically tracked as CVE-2026-5509, affecting models like Archer BE450v1 and BE7200 v1. This command injection vulnerability, which has a CVSS score of 8.5, allows authenticated…

Esri has released an urgent security patch for ArcGIS Server, which addresses multiple critical vulnerabilities affecting versions 12.0 and prior. The most severe flaw, identified as CVE-2026-9181, is a high-severity directory traversal vulnerability with a…

The upcoming livestream titled "Put agentic AI to work" will showcase how Elastic Security utilizes Google Threat Intelligence (GTI) for effective threat detection and alert enrichment. The integration leverages AI-driven workflows for real-time…

Bitdefender Labs reveals a significant malvertising ecosystem in the APAC region, highlighting how scams proliferate through social media ads. Key findings include the identification of over 12,000 scam campaigns, with health and finance being the most…

The European Union is nearing access to Anthropic's AI model, Mythos, as part of Project Glasswing, aimed at improving cybersecurity and vulnerability discovery. This integration follows discussions between the European Commission and Anthropic, intending to…

Meta's AI support chatbot has been exploited by hackers to gain access to high-profile Instagram accounts. The hackers manipulated the chatbot to change the email addresses associated with these accounts while using a VPN to mask their locations. This…

Red Hat's official NPM accounts were compromised, leading to a malicious worm, named Shai-Hulud, affecting over 30 packages. This worm collects sensitive credentials during the npm install process and spreads by republishing backdoored packages.…

Microsoft is encountering significant backlash from the cybersecurity community after threatening criminal prosecution against a researcher, known as Nightmare-Eclipse, who disclosed multiple zero-day exploits. The situation began when the researcher…

Dutch police have disrupted a massive botnet comprising 17 million infected devices, including computers, smartphones, and tablets. The operation followed a report from a security researcher to the Netherlands’ National Cyber Security Centre (NCSC-NL).…

The article discusses a supply chain attack identified as 'Miasma,' which compromised Red Hat npm packages. This attack involved the use of a credential-stealing worm to infiltrate these packages, aiming to exploit vulnerabilities within the network…

This article discusses how Cloudflare reduced core unit boot time significantly from hours to just minutes through improvements in their network boot automation process. The boot sequence, managed by UEFI firmware, was plagued by long delays due to a…

The Centre for Cybersecurity Belgium (CCB) issued a warning that threat actors are exploiting a critical-severity Windows Netlogon vulnerability, tracked as CVE-2026-41089, which carries a CVSS score of 9.8. This security flaw, disclosed on May 12 during…

A fake website mimicking BlueWallet, a legitimate Bitcoin wallet, is targeting Mac users with malware that steals passwords, accounts, and cryptocurrencies. Users are tricked into downloading and executing an AppleScript that bypasses security measures. The…

A critical vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect VPN allows attackers to bypass authentication and gain unauthorized access to VPNs. Disclosed in May 2026, the flaw has been actively exploited, prompting advisories from…

A critical vulnerability in the open-source AI platform Flowise, identified as CVE-2026-40933, allows attackers full server control by importing a malicious workflow file. This flaw primarily affects self-hosted deployments while the managed Flowise Cloud…

The article discusses recent developments in cybersecurity as of June 1, 2026. Key points include: 1) A newfound flaw in Linux and vulnerabilities in PAN-OS, suggesting increases in exploit threats. 2) AI usage in Cybersecurity is on the rise, with…

A study analyzing 16,699 ransomware leak posts over two years reveals that ransomware operators primarily operate during business hours, peaking in the European afternoon, challenging the common narrative of nocturnal hackers. Key findings indicate that the…

Infosecurity Europe 2026 will feature 'Enter the War Room: A Tabletop Experience', a 90-minute immersive exercise simulating a ransomware attack on a fictional supermarket, 'BlueCart'. This exercise aims to prepare cybersecurity teams for real-life threats,…

Industrial cybersecurity firm Dragos has acquired Phosphorus, an xIoT security specialist, to enhance its capabilities in securing connected devices in critical infrastructure. Phosphorus, founded in 2017, offers a platform that helps organizations identify…

China-aligned hacking groups have intensified their attacks, notably targeting the Czech Republic and Taiwan, raising concerns about cybersecurity threats associated with geopolitical tensions. The article discusses the rise of 'Dragon Weave', a malicious…

The Trump administration is advocating for the integration of artificial intelligence (AI) in the U.S. military, while facing concerns over safety and ethical implications from within the military and tech companies. Adm. Frank Bradley expresses the need for…

At Infosecurity Europe 2026, vendors discussed the role of AI in Security Operations Centers (SOCs), asserting that while AI will automate repetitive tasks, it will not replace human analysts. Vendors emphasized the need for transparency in AI operations,…