⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Law enforcement agencies from 22 countries helped identify 263 suspects and arrested 58 individuals linked to cybercrime networks coordinated by African crime groups.
Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-authored code before execution.
Talos Intelligence examines the security risks organizations face when reclaiming operational sovereignty while adopting AI, highlighting the tension between innovation and necessary security controls. The article argues that building these capabilities in-house is impractical for most organizations, as it introduces significant safety penalties and resource burdens.
For years, cybersecurity teams have communicated risk through labels such as “High,” “Medium,” and “Low.” Those ratings can help security teams prioritize vulnerabilities, but they often leave CFOs with a more important question unanswered: What does the risk actually mean for the business financially? That question has become harder to ignore as the threat landscape accelerates. Cyble’s 2025 threat predictions, published as the year unfolded, provide a useful illustration.
Bad actors are actively attempting to exploit two severe unauthenticated authentication bypass vulnerabilities in the Xecurify miniOrange SAML 2.0 Single Sign On WordPress plugin tracked as CVE-2026-61979 and CVE-2026-15981. The flaws allow an attacker to sign in as any WordPress user, including administrators, by submitting a crafted SAMLResponse with a malformed signature that bypasses verification entirely.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a maximum-severity (CVSS 10.0) security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its KEV catalog, citing evidence of active exploitation. The vulnerability, CVE-2026-21962, allows an unauthenticated attacker with network access via HTTP to compromise instances or modify critical data.