Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,179 stories synthesized.
Tenable One Cloud Exposure now supports Microsoft Entra Agent ID, enabling organizations to discover and secure the unique identities of AI agents operating in their cloud environments.
Microsoft introduces Project Perception and Guardian Agents to manage the security risks posed by AI agents operating within enterprise systems, treating them as potential insider threats.
Key findings • 25 vulnerabilities disclosed for Apache Camel on October 19, 2026, affecting multiple components. • High severity flaws include deserialization and XML external entity injectio…
A critical command injection vulnerability in SiteGuard Server Edition WAF, CVE-2026-106931, is being actively exploited, potentially granting attackers root or SYSTEM privileges and full server control.
Hackers stole customer passwords and credentials from Russian hosting provider FirstVDS by exploiting a vulnerability in the VMmanager 6 server management software.
Sensitive personal and academic data of millions of California students was stolen from an Educational Testing Service (ETS) SFTP site due to compromised credentials.
Researchers have developed an adaptive AI system that can solve visual CAPTCHAs and improve its performance over time without human intervention.
Key findings • Seven MISP vulnerabilities disclosed on October 19, 2026, ranging from Medium to High severity. • High severity flaws include sensitive configuration data exposure and improper…
Researchers confirm Pegasus spyware infections on prominent Serbian critics, including a university rector and a prosecutor, utilizing zero-click exploits as elections approach.
Microsoft was the most impersonated brand in phishing attacks during Q3 2026, accounting for 33% of attempts, a significant increase from the previous quarter, according to Check Point Research.
Key findings • Three low-severity XSS vulnerabilities disclosed together in SourceCodester Inventory System 1.0. • Vulnerabilities affect API handlers for sales, purchases, and product manage…
Attackers are exploiting compromised UpdraftCentral dashboard keys to upload and activate malicious plugins, effectively backdooring WordPress sites.
This week's security news covers critical Chrome vulnerabilities, the potential spread of AI worms, and a sextortion scam that defrauded victims of $60 million.
A critical vulnerability in Broadcom's Wi-Fi setup software allows attackers within radio range to execute arbitrary code as root on affected routers, bypassing authentication.
Key findings • 23 malicious npm packages disclosed within a 4-minute window on October 19, 2026. • The rapid disclosure window indicates a coordinated supply chain attack. • Many packages…
Bearer CLI, a new source-available SAST tool, scans code for vulnerabilities and prioritizes findings based on the sensitive data they could expose, aiding developers in focusing on critical security issues.
Meta's AI agents, particularly the new Muse, are significantly contributing to a 41.5% surge in AI bot traffic, prompting concerns about website security and resource management.
Multiple vulnerabilities in Plex Media Server, chained as Plex2Shell, are being actively exploited in the wild to deploy cryptominer malware and proxy software.
Microsoft has confirmed that recent Windows Server security updates can break on-premises Exchange Server email services, impacting mail flow and webmail access.
Key findings • Three critical vulnerabilities disclosed in Google OSS Agent Mesh (SAM) between October 18-19, 2026. • CVE-2026-103091 and CVE-2026-102503 involve authorization and authenticat…
Key findings • Twelve Gitea vulnerabilities disclosed on October 18, 2026, impacting API access and data visibility. • Issues include improper user visibility enforcement, exposure of private…
Key findings • 25 Linux kernel vulnerabilities disclosed on October 18, 2026, affecting diverse subsystems. • Issues range from memory management flaws and race conditions to networking and s…
Key findings • 25 WordPress plugins disclosed with vulnerabilities on October 18, 2026. • Critical flaws include deserialization in Conversational Forms for ChatBot (CVE-2026-110886) and SQLi…
This week's security news highlights a significant breach affecting Ledger hardware wallets, a widespread vulnerability in npm packages, and new developments in AI security.