News

The content discusses a critical security vulnerability tracked as CVE-2026-25089 affecting the Fortinet ecosystem, specifically the FortiSandbox. This vulnerability allows unauthenticated attackers to execute commands using specially crafted HTTP requests,…

A critical security alert highlights active exploits in various software systems, particularly the TinyMCE text editor, which has vulnerabilities allowing remote script injection. Key vulnerabilities include CVE-2026-47761 (stored XSS in media plugins),…

The content outlines critical software vulnerabilities found in MBS GmbH's industrial communication appliances, specifically in their Universal Gateway firmware versions V6_0_0_5 and earlier. Key vulnerabilities include CVE-2026-35075, which involves…

Microsoft's June 2026 Patch Tuesday released a record 208 CVEs, significantly surpassing the previous monthly record of 177 CVEs. Noteworthy vulnerabilities include CVE-2026-41091, actively exploited and affecting Microsoft Defender; CVE-2026-45657, a…

The article discusses vulnerabilities in cloud logging services, emphasizing their critical role in security monitoring and the potential for attackers to exploit these systems for evasion and visibility. Key points include: 1. **Attack Techniques**:…

Microsoft's June 2026 Patch Tuesday update introduced a record 206 unique CVEs, highlighting the increasing speed and scale of vulnerability discovery due to AI. This update includes three previously disclosed zero-day bugs and 32 critical-severity…

Microsoft published 200 vulnerabilities in the June 2026 Patch Tuesday, with significant patches addressing an unusually high number of browser vulnerabilities, particularly affecting the Chromium framework. Notably, a researcher named Nightmare Eclipse…

Microsoft recently addressed a critical zero-day vulnerability, CVE-2026-45586, disclosed by a researcher known as Nightmare Eclipse, who has had a contentious relationship with the company. This vulnerability enables local privilege escalation, posing…

A significant vulnerability termed "Ghost-Sender" in Microsoft Exchange allows attackers to spoof any email address, enabling them to send emails from any user within vulnerable organizations. The flaw specifically affects those using Exchange Online or…

A variant of the Shai-Hulud worm has infiltrated 73 Microsoft GitHub repositories, causing disruptions to CI/CD workflows. This attack, reported on June 5, involved an automated sweep that quickly disabled affected repositories, significantly impacting…

Adobe recently released updates fixing 123 vulnerabilities across 11 products, including critical flaws in Adobe Campaign Classic and ColdFusion. Key vulnerabilities include XSS flaws in Adobe Experience Manager and multiple issues across Acrobat, Reader,…

The article discusses the challenges of investigating AI-related activities within Microsoft 365 Copilot and Azure AI services. It highlights the necessity for a structured approach to understand and reconstruct activities, using telemetry data generated by…

StepSecurity has launched a new API for its Threat Center that provides automated access to compromised Open Source Software (OSS) components involved in supply chain incidents. This allows teams to quickly respond to threats by integrating incident data…

Meta is set to utilize off-site business data for enhancing its AI-driven personalization and data feeds. This move aims to improve user engagement by leveraging external data sources, allowing for more tailored and effective content delivery. The strategy…

Anthropic has launched Claude Fable 5, a high-capacity AI model with enhanced safety measures for sensitive domains like cybersecurity. This is the first model of its kind available for widespread access, featuring built-in restrictions that revert to a less…

Veeam has addressed a critical remote code execution (RCE) vulnerability, CVE-2026-44963, impacting Backup & Replication version 12.x, allowing low-privileged domain users to potentially take control of backup servers within an Active Directory domain. The…

OpenSSL has released patches for 18 vulnerabilities, including a high-severity flaw (CVE-2026-45447) that could lead to remote code execution. This vulnerability, a heap user-after-free issue, can be exploited through specially crafted PKCS#7 or S/MIME…

The article, written by Ravie Lakshmanan and published on June 9, 2026, discusses a Remote Code Execution (RCE) vulnerability discovered in Veeam Backup & Replication software. This flaw allows domain users to execute code remotely, which can lead to severe…

Microsoft has restored some GitHub repositories while keeping others offline as an investigation into the Miasma security issue continues. This decision affects various projects, potentially impacting developers relying on these repositories. The article…

The Miasma worm has compromised 73 Microsoft GitHub repositories, including key Azure infrastructure. This self-replicating malware was spread through AI coding tools, stealing cloud credentials from developers. The attack began after compromising a Red Hat…

Russian attackers are exploiting a patched WinRAR vulnerability (CVE-2025-8088) in separate campaigns aimed at military and government organizations in Ukraine. Two groups, Shadow-Earth-066 and Earth Dahu, are using malicious emails containing weaponized…

A recent report by Checkmarx reveals that 75% of firms knowingly deploy vulnerable code due to pressure on CISOs to prioritize business deadlines over security concerns. The research highlights that 95% of CISOs feel pressured to delay reporting security…

Researchers have uncovered a critical vulnerability in the Linux kernel tracked as CVE-2026-23111, which allows unprivileged users to escalate their permissions to root. The issue arises from a single misplaced character in the nf_tables subsystem, which…

Anthropic's Claude Mythos Preview model can rapidly exploit known vulnerabilities, raising cybersecurity concerns. The model identified numerous flaws, including 271 in Firefox, and demonstrated the ability to create working exploits for Firefox and Windows…

A survey revealed that 97% of software development teams use AI coding assistants, yet only 30% implement governance measures to oversee their use. Popular tools include GitHub Copilot and Claude Code, credited with enhancing productivity, allowing…

On June 8, 2026, CISA added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-42271 for LiteLLM (CVSS 8.8) and CVE-2026-50751 for Check Point Security Gateway (CVSS 9.3). **CVE-2026-42271** involves a command…

A critical vulnerability in phpBB forum software allows attackers to hijack any account, including administrator accounts, with a single unauthenticated request. Rated 9.4 on the CVSS scale, this flaw affects all phpBB versions up to 3.3.16 and 4.0.0 alpha…

Meta's integration of face-recognition technology in smart glasses has reignited privacy concerns. Reports indicate that a dormant code, nicknamed 'NameTag,' was found in the Meta AI app for glasses, raising fears of potential misuse for biometric…

According to a report by Lloyds Bank, scammers are increasingly exploiting Meta platforms like Facebook, Instagram, and WhatsApp, accounting for over 68% of fraud reports from its customers in the UK. Victims have reported losing £66 million annually due to…

Atsign has introduced AI Architect, a new approach to enhance security by design in app development using a concept of cryptographic invisibility. As AI coding accelerates development, it risks creating insecure applications. Atsign aims to secure…

The article discusses critical vulnerabilities identified in the Spring Framework, specifically targeting Java cloud deployments. Notable vulnerabilities include CVE-2026-41720, an LDAP authentication bypass that allows unauthorized access to directory…