Cybersecurity

A critical SQL injection flaw in Arista VeloCloud Orchestrator on-premise hosts allows unauthenticated remote attackers to compromise enterprise SD-WAN management networks.

A high-severity OS command injection vulnerability in EG Secure Solutions SiteGuard allows remote code execution with root privileges.

A critical authentication bypass flaw in BeyondTrust Remote Support allows attackers to execute file operations, prompting CISA emergency remediation warnings.

A critical directory traversal vulnerability across multiple Atlassian Data Center products allows unauthenticated attackers to access sensitive files.

A physical outage at a key Yandex datacenter caused a dramatic drop in automated internet traffic, highlighting how vulnerable global bot networks are to targeted physical disruption.

A major data breach involving Danish social security identifiers highlights the ongoing danger of weak authentication in national systems.

A buffer restriction flaw in Citrix NetScaler ADC and Gateway allows for denial-of-service attacks, with CISA confirming active exploitation in the wild.

A critical privilege escalation vulnerability in the Zammad helpdesk platform allows local users to gain root access, prompting an urgent warning from CISA.

A critical path traversal and null byte vulnerability in Fortinet FortiMail allows unauthenticated attackers to write arbitrary files, prompting an urgent CISA warning.

A critical out-of-bounds write flaw in Apple's CoreGraphics engine allows attackers to execute code via malicious images, triggering a CISA warning.

A critical memory buffer vulnerability in Citrix NetScaler ADC and Gateway is currently being exploited in the wild, enabling remote code execution.

CISA has added CVE-2026-67279 to its Known Exploited Vulnerabilities catalog, warning of active exploitation of a workflow bypass vulnerability in MikroTik RouterOS.

New research shows that simply checking if an AI-generated security patch compiles is a dangerous metric for measuring actual vulnerability remediation.

A critical stack-based buffer overflow in Zyxel GS1900 switches is currently under active exploitation, allowing remote command execution via crafted HTTP requests.

Cybersecurity officials added CVE-2025-39964 to the KEV catalog, warning of active exploitation of a race condition in the Linux kernel's AF_ALG socket interface.

CISA added CVE-2026-58704 to its Known Exploited Vulnerabilities catalog following active exploitation of an improper authorization flaw in Google Pixel cellular modems.

CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities catalog following active exploitation of a root SQL injection flaw in Cisco Secure Email Gateway appliances.

CISA added CVE-2026-84869 to its Known Exploited Vulnerabilities catalog following active exploitation of ScreenConnect session authorization controls.

Google patched an actively exploited zero-day vulnerability in Chromium's V8 JavaScript engine that allows arbitrary code execution inside browser sandboxes.

A new public opinion poll reveals overwhelming opposition in the United Kingdom to government proposals that would mandate the scanning of encrypted messaging applications.

Security researchers warn that modern AI analysis tools allow attackers to synthesize working exploit payloads from vague patch notes and commit messages in minutes.

A severe code injection flaw in Gitea's diffpatch API endpoint allows authenticated users to execute arbitrary shell commands on host servers.

Unauthenticated attackers are actively exploiting a command injection vulnerability in Zimbra Collaboration Suite to execute arbitrary OS commands via crafted SMTP requests.

Cisco has patched a critical heap inspection vulnerability (CVE-2026-20349) in ASA and FTD firewalls that is currently being actively exploited in the wild.

A new security framework reveals how reusable 'skills' in AI agents create a new attack surface for data theft and unauthorized system access.

A critical vulnerability in GitHub Enterprise Server allowed attackers to execute code remotely via malformed Git hooks, threatening the security of internal corporate codebases.

A critical Remote Code Execution vulnerability in GitHub Actions allowed attackers to hijack runners through malicious pull requests, threatening private repository secrets.

Five specific pieces of hardware that each close a concrete attack path for normal people. No subscriptions, no yearly fees, around 250 euros all-in.

SMS and authenticator-app 2FA looks like security but leaves a trivial opening. A 50-dollar piece of hardware closes it — and almost nothing else will.