⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Two malicious LiteLLM releases on PyPI in March 2026 contained credential-stealing code, potentially exposing over 2,500 organizations. CloudSEK obtained a dataset of captured files and log files from the campaign, but the data does not confirm actual victimization.
SAP addressed a maximum-severity vulnerability in Commerce Cloud that allows unauthenticated attackers to execute arbitrary code via specially crafted input. The flaw, rated CVSS 10.0, can fully compromise application confidentiality, integrity, and availability.
A proof-of-concept called ShieldBreak demonstrates a full patch bypass for CVE-2026-50656 in Microsoft Defender for Windows. The exploit grants SYSTEM privileges, and the researcher asserts that Microsoft's fix is incomplete.
Multiple vulnerabilities have been discovered in Zoom products, including Meeting SDK, Rooms, and Workplace. These flaws could allow remote attackers to execute arbitrary code, disclose sensitive information, or manipulate data.
Microsoft has released its monthly security update for August 2026, covering a wide range of products including Windows, Office, Azure, and Developer Tools. The update addresses multiple vulnerabilities with impacts such as remote code execution, elevation of privilege, and denial of service.
A security restriction bypass vulnerability has been identified in Docker Desktop, affecting versions below 4.86.0 on Windows, macOS, and Linux. Remote attackers could exploit this flaw to bypass security restrictions.