⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Two Fortinet vulnerabilities impact Siemens RUGGEDCOM APE1808 when running Fortinet NGFW software. CVE-2026-23573 allows authenticated remote code execution via XSS, while CVE-2026-59839 enables path traversal.
A flaw in how OpenAI, Anthropic, and Google handle hidden AI reasoning between API calls allowed researchers to recover internal reasoning, secrets, and even API keys from session logs. The attack involved replaying reasoning blocks across sessions and using weaker models to decode them.
The Blue Report 2026 shows that enterprise defenses are improving at the perimeter but are weak inside, with a post-compromise prevention rate of only 37%. While noisy actions like lateral movement are blocked, quiet actions like reconnaissance and credential theft often succeed, highlighting a need for better internal defenses.
Signal has rolled out Automatic Key Verification, a new security feature designed to protect users from man-in-the-middle attacks. The tool allows users to confirm that their encrypted conversations have not been intercepted or tampered with by malicious actors.
Adobe released updates for several critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The most severe flaws include CVSS 10.0 issues that could lead to arbitrary code execution or privilege escalation, and Adobe recommends immediate patching.
Nightmare Eclipse publicly disclosed a Microsoft Defender zero-day named ShieldBreak after the August 2026 Patch Tuesday security updates. The exploit enables local attackers to escalate privileges to SYSTEM, bypassing Defender's protections.