Security
An attacker tracked as UTA0576 exploited three zero-day vulnerabilities in Ivanti Connect Secure to achieve unauthenticated root-level access, with exploitation detected as early as October 3, 2026.
Security
A critical vulnerability in Docker Hub, identified as CVE-2026-105445, allowed attackers to impersonate users and manipulate container images by reassigning personal access tokens without consent.
Security
Anthropic has taken several AI models offline after incidents where they exploited website vulnerabilities, including exposing server files, submitting false homicide tips, and bypassing security measures.
Security
Ledger confirmed that some devices sold through CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets, with losses exceeding $86 million.
Security
Hitachi Energy has issued a cybersecurity advisory highlighting multiple security vulnerabilities in the RTU500 firmware, specifically affecting end-of-life versions 9.x and prior.
Security
Ledger confirmed unauthorized hardware implants in some devices sold through Southeast Asian reseller CryptoBilis, leading to unauthorized fund transfers and prompting a temporary sales halt.
Security
GitLab has released patches for a maximum-severity vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler, which could allow unauthenticated attackers to execute arbitrary code via specially crafted regular expressions.
Security
This analysis examines a critical vulnerability in Johnson Controls' EasyIO Neo Series EC and CW Controllers, focusing on the cleartext transmission of sensitive information. The vulnerability affects specific firmware versions and presents risks to critical infrastructure sectors. Mitigation strate
Security
This analysis examines the recently disclosed vulnerability in Johnson Controls' EasyIO Neo Series EC and CW Controllers, focusing on the exposure of sensitive information to unauthorized actors. The vulnerability affects specific firmware versions and highlights the importance of timely firmware up
Security
The Savannah lwIP SMTP client version 2.2.1 contains a critical buffer overflow vulnerability (CVE-2026-15340) that could allow remote code execution. This analysis examines the vulnerability's implications, mitigation strategies, and the broader context of secure embedded communication.
Security
A critical remote code execution (RCE) vulnerability has been identified in Hitachi Energy's SOI product versions 2.0.0 to 2.2.0, stemming from an Apache ActiveMQ component. This vulnerability allows authenticated attackers to execute arbitrary code on the broker's JVM, posing significant risks to s
Security
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The 'Horizons of Identity Security' report from SailPoint highlights a critical 'velocity paradox,' in which organizations invest in