1. Executive summary Siemens has confirmed in-the-wild exploitation of CVE-2026-110936, a DLL search-path flaw in Siemens Software Center, after attackers paired
1. Executive summary Rank Math PRO, a commercial WordPress SEO plugin, shipped a malicious build of version 3.0.123 between 2026-10-15 20:02
1. Executive summary Rapid7 published an analysis arguing that AI agents acting with delegated credentials are a new class of privileged insider, and that the controls
1. Executive summary Rapid7 has documented a Citrix NetScaler ADC compromise in which attackers chained CVE-2026-88771 (CVSS 9.5 critical, CWE-20, in CISA
1. Executive summary Drupal has released fixes for five vulnerabilities, two of them critical remote code execution flaws: CVE-2026-108099 in the contributed Entity List
1. Executive summary Two authentication bypass flaws in internet-facing access appliances are confirmed exploited: CVE-2026-104935 in Ivanti Connect Secure (CVSS 8.6 HIGH,
1. Executive summary The GhostAction campaign has added a second delivery path: phishing of open-source developers to deliver a credential stealer hidden in a fake
1. Executive summary Microsoft published a security-architecture position paper describing how it intends to govern autonomous AI agents as a class of insider risk, and
1. Executive summary A fake Web3 accelerator is distributing malicious npm packages that install information stealers and backdoors on Windows and macOS systems, according to reporting
1. Executive summary A report published by The Hacker News on 2026-10-19 describes how two documented Salesforce features, Flow-driven agent invocation and Email-
1. Executive summary Citrix disclosed eight NetScaler ADC and Gateway vulnerabilities on 2026-09-27, two of which are under active exploitation as zero-days: CVE-
1. Executive summary A cluster tracked by Palo Alto Networks Unit 42 as CL-STA-0954 (also designated UNC5820) compromised a telecommunications managed service provider in