⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CVE-2026-20349 is a high-severity denial-of-service vulnerability in Cisco ASA and Secure FTD software exploited in the wild. Insufficient error checking in the Remote Access SSL VPN service lets unauthenticated attackers trigger device reloads.
CVE-2026-68820 is an elevation-of-privilege vulnerability in the Windows Ancillary Function Driver (AFD.sys) that allows local attackers to gain SYSTEM privileges via a race condition. It was exploited by the North Korean Lazarus group as part of Operation Dream Job to install a kernel rootkit.
Walmart transformed its security operations by prioritizing trust, innovation, and open communication. The company scaled its defenses effectively through transparency and a strong team culture, avoiding disruption while enhancing security posture.
Microsoft's latest Patch Tuesday release includes roughly five times the number of patches the company typically shipped before AI-assisted vulnerability discovery became prevalent. The article highlights how artificial intelligence is reshaping bug discovery, leading to a dramatic increase in the volume of security updates organizations must manage.
Cybersecurity firm Rapid7 released a proof-of-concept exploit for a critical Microsoft SharePoint vulnerability. Threat actors have quickly incorporated it into attacks, emphasizing the need for immediate patching.
The Cybersecurity and Infrastructure Security Agency (CISA) has given federal agencies two weeks to patch a Microsoft vulnerability exploited by North Korean hackers. The bug was uncovered by researchers analyzing a persistent campaign that used fake job applications to target victims.