1. Executive summary CVE-2026-87902 is a remote file inclusion flaw in WordPress Core that lets an unauthenticated attacker force get_page_template() page-template
1. Executive summary Microsoft Security Research has attributed an Azure resource-destruction campaign to Storm-3168, the actor it tracks in connection with JADEPUFFER, using two
1. Executive summary A leak-site listing posted on 2026-09-25 names taspenlife.com, a Kazakhstan life and health insurer, as a victim of the
1. Executive summary CVE-2026-48842 is a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail, affecting 1.6.x before 1.
1. Executive summary CVE-2026-65660 is a code injection flaw in Microsoft SharePoint, rated CVSS 8.8 HIGH (CWE-94), and CISA added it to
1. Executive summary Malwarebytes has documented an undocumented Windows remote-access Trojan it calls Kothamine Agent, a C/C++ implant with more than 30 commands that
1. Executive summary CVE-2026-67279 is a medium-severity flaw (CVSS 6.9, CWE-841) in MikroTik RouterOS that lets an unauthenticated client open a
1. Executive summary CVE-2026-48842 is a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail, affecting 1.6.x before 1.
1. Executive summary Dyfed-Powys Police, the force covering southwest Wales with more than 2,000 officers and staff, disclosed on 2026-09-25 that a
1. Executive summary LinkedIn has announced trust and verification features intended to make fabricated professional identities, invented work histories, and company impersonation harder to sustain: colleague
1. Executive summary Bitget, a Singapore-based cryptocurrency exchange, suffered a breach on Thursday 24 September 2026 in which attackers moved more than $387.5 million
1. Executive summary A single Chinese-speaking operator used three open source AI harnesses (Strix, Cairn, Hermes) to run near-autonomous intrusion and card-skimming operations