1. Executive summary On 17 September 2026 Microsoft patched 18 vulnerabilities across its Azure cloud portfolio and Copilot-branded AI products, the majority of them elevation
1. Executive summary Zscaler ThreatLabz attributes a new campaign, Operation RapidRust, to Transparent Tribe (APT36), targeting government and defence entities in India and Afghanistan. The campaign
1. Executive summary CVE-2026-58138 is an unauthenticated remote code execution vulnerability in Orkes Conductor, an open source framework used to orchestrate microservices, workflows and
1. Executive summary Zimperium's zLabs has documented an Android banking Trojan, RatHat, that hands a live AI assistant control of the infected device'
1. Executive summary CVE-2026-53266 is a high-severity (CVSS 8.8) out-of-bounds write in the Linux kernel's ebtables SNAT target,
1. Executive summary Microsoft has patched CVE-2026-85889, a CVSS 10.0 CRITICAL missing-authentication flaw (CWE-306) in Azure AI Foundry that allows an
1. Executive summary CVE-2025-39964 is a race condition (CWE-362) in the Linux kernel's AF_ALG cryptographic socket interface: concurrent writes to
1. Executive summary Kaspersky reports that the cyberespionage group tracked as NightEagle (also APT-Q-95), active since at least 2023 and previously focused on strategically
1. Executive summary Unit 42 has disclosed a design weakness in AWS AgentCore Harness: with default configuration, the harness's built-in shell tool runs
1. Executive summary Docker disclosed CVE-2026-77179 on 15 September 2026, a critical sandbox-escape flaw (CVSS 9.4, CWE-59) in Docker Sandboxes on
1. Executive summary ESET Research reports that the China-aligned espionage group FamousSparrow has replaced its long-standing SparrowDoor implant with a new modular C++ backdoor,
1. Executive summary In June 2026 the IETF published RFC 10008, defining QUERY, the first new standard HTTP method since PATCH in 2010. QUERY is safe