1. Executive summary BSI Germany published WID-SEC-2026-4099 on 2026-10-22, rated hoch, covering multiple vulnerabilities in Splunk SOAR. The advisory states an
1. Executive summary CrowdStrike reports four previously unreported threat actors running agentic AI campaigns between May and August 2026, in which large language model agents selected
1. Executive summary BSI Germany published WID-SEC-2026-4107 on 2026-10-22, rating multiple vulnerabilities in the Vaadin Java web framework as high severity.
1. Executive summary Huntress has published an analysis of three phishing kits that target Microsoft 365 session tokens rather than passwords, using device-code phishing, adversary-
1. Executive summary On 21 October 2026 LiteLLM's release pipeline was compromised and version 1.107.0 was published to PyPI and Docker Hub
1. Executive summary Tenable reports that security incidents involving organisations' shadow AI assets more than doubled year on year, to 43% from 20%, citing IBM&
1. Executive summary Between 14 July and 22 September 2026, Huntress recorded 497 successful Microsoft 365 sign-ins across 79 victim organisations in which the attacker
1. Executive summary Anthropic has updated Claude Security, its codebase vulnerability scanning and patch-suggestion service, with recurring scans of code changes, automatic fix tracking that
1. Executive summary A flaw in the OpenCode AI coding agent allowed a malicious or hijacked MCP server to run code on a developer's
1. Executive summary Microsoft attributes a supply chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China-state-aligned actor active since 2021,
1. Executive summary Cisco has released fixes for 34 vulnerabilities across Expressway Series, Unified Communications, Snort 3, IOS XR and Secure Client, announced on 2026-10-
1. Executive summary Splunk released security updates on 21 October 2026 for Splunk Enterprise (versions 9.4.16, 10.0.11, 10.2.8 and 10.