1. Executive summary Microsoft and NVIDIA published a joint guidance paper, Risk Management for Open-Weight Models in Enterprise, on 2026-10-16, the first in
1. Executive summary A China-nexus espionage actor tracked as Armory Castle (previously UNC5221, also tracked by CrowdStrike as Warp Panda) exploited CVE-2026-102764 in
1. Executive summary A financially motivated actor tracked as TAG-217 used ARTEX, a Chinese-language open-source AI penetration testing framework, against at least seven
1. Executive summary A suspected advanced threat actor has been observed exploiting CVE-2025-61624, a path traversal flaw in the FortiOS command line interpreter, to
1. Executive summary A China-linked espionage group tracked as Armory Castle (also reported as UNC5221 and Warp Panda) exploited CVE-2026-102764 in BeyondTrust Remote
1. Executive summary F5 and Juniper Networks have released patches covering dozens of vulnerabilities across NGINX, BIG-IP, Junos OS, Junos OS Evolved and Juniper Cloud-
1. Executive summary Microsoft has released out-of-band patches for more than 30 vulnerabilities, most of them in the Office suite, two dozen of which
1. Executive summary A China-nexus espionage group tracked as Armory Castle (also reported as UNC5221 and Warp Panda) exploited CVE-2026-102764 in BeyondTrust Remote
1. Executive summary Unit 42 has documented a Linux-focused espionage campaign, tracked as CL-UNK-1211, against government entities and state-affiliated infrastructure, with observed
1. Executive summary A critical flaw in the Linux kernel's networking code, tracked as CVE-2026-99999 and nicknamed PwnEscape, allows code running inside
1. Executive summary A cybersecurity incident at BAE Systems has taken down the Bankruptcy Noticing Center (BNC), the system that generates and sends notices for every
1. Executive summary An incomplete fix in the mise developer toolchain leaves four shell-interpreter settings out of the global_only denylist that the CVE-2026-