The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Palo Alto Networks vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. The flaw affects PAN-OS software and requires immediate attention from organizations runn
A critical remote code execution (RCE) vulnerability has been discovered in Gogs, the popular self-hosted Git service. The flaw allows any authenticated user to execute arbitrary code on vulnerable servers, potentially leading to complete system compromise. Organizations running Gogs versions prior
Google plans to fundamentally redesign its search engine with agentic AI capabilities by 2026, introducing autonomous agents that can perform multi-step tasks on behalf of users. This transformation raises critical cybersecurity concerns around data privacy, authentication, API security, and the exp
Critical CVE-2026-20182 hits Cisco SD-WAN with CVSS 10.0 rating. Unauthenticated attackers can gain full admin access remotely. Active exploitation confirmed.
The notorious cybercrime group ShinyHunters has leaked what appears to be Charter Communications customer data on a dark web forum, claiming to have exposed information on approximately 5 million customers. The dataset allegedly contains personal information including names, addresses, phone numbers
A sophisticated Brazilian banking trojan has been detected actively spreading across Portugal, targeting financial institutions and their customers. The malware employs advanced evasion techniques, including process hollowing, keylogging, and screen capture capabilities to steal banking credentials.
Orkes Conductor workflow platform versions before 3.30.2 contain a critical pre-authentication RCE vulnerability (CVE-2026-58138, CVSS 9.8) actively exploited in the wild. No authentication required for complete system compromise. Immediate patching mandatory.
Researchers have demonstrated that freely available open-source AI models can autonomously design and build self-propagating computer worms without requiring sophisticated tools like proprietary AI systems or zero-day exploits. This development marks a significant shift in the threat landscape, lowe
A critical command injection vulnerability has been discovered in multiple TP-Link router models, allowing unauthenticated attackers to execute arbitrary system commands remotely. The flaw, affecting widely deployed consumer and small business routers, stems from improper input validation in the web
Microsoft has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Endpoint Protection Platforms, reinforcing its position in the enterprise security market. The recognition highlights Microsoft Defender for Endpoint’s comprehensive threat protection capabilities, integration ecosystem