1. Executive summary The NCSC has published updated TLS guidance that adds recommended configurations for post-quantum cryptography (PQC), following the IETF's publication of
1. Executive summary HiddenLayer tested TypeSafe AI's Jev decision model and a Qwen3.8-27B model tuned to behave like a decision model, and
1. Executive summary Cisco Secure Email Gateway (SEG) is being exploited as a zero-day through CVE-2026-76519, a CVSS 9.8 critical flaw in
1. Executive summary Ivanti Connect Secure (ICS) is being exploited in the wild through a zero-day chain that gives a remote, unauthenticated attacker arbitrary command
1. Executive summary Microsoft's Digital Crimes Unit, working with Resecurity and law enforcement partners, disrupted the primary developers and infrastructure of a Chinese-language
1. Executive summary A flaw in the preview pane of Claude Code Desktop lets an attacker read developer credentials without user interaction, according to Dark Reading.
1. Executive summary Palo Alto Networks PAN-OS contains a code injection vulnerability, CVE-2026-0322, rated CVSS 8.6 HIGH, that allows an authenticated attacker
1. Executive summary AhsayCBS, the Ahsay Cloud Backup Suite server, carries an improper authentication flaw (CVE-2026-105133, CVSS 5.5 MEDIUM, CWE-287) in the
1. Executive summary AhsayCBS, the Ahsay Cloud Backup Suite server, carries an OS command injection flaw, CVE-2026-105134, rated CVSS 9.3 CRITICAL, which a
1. Executive summary CVE-2026-76519 is a relative path traversal flaw (CWE-23) in Cisco Secure Email Gateway that lets an unauthenticated, remote attacker write
1. Executive summary Microsoft, Health-ISAC, the Japan Cybercrime Control Center (JC3) and a coalition of private sector firms including Resecurity, Cloudflare, Oracle, Proofpoint and TRM
1. Executive summary Booz Allen ran frontier AI models against an isolated operational technology testbed in its Chantilly, Virginia lab and the models cleared all eight