1. Executive summary On 2026-09-15 CISA and NIST published Interagency Report (IR) 8587, Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations
1. Executive summary On 2026-09-15 CISA published ICSA-26-258-08 covering seven vulnerabilities in CareCam CM2507 IP cameras running firmware HMT.CM2507 v251211.
1. Executive summary Siemens ProductCERT has published SSA-887643 (republished verbatim by CISA as ICSA-26-258-06) covering CVE-2026-80465, an improper-verification-of-
1. Executive summary Siemens has published a fix for a reflected cross-site scripting (XSS) vulnerability in the authentication redirect flow (/auth/ endpoint) of Siemens Teamcenter,
1. Executive summary Sophos' Counter Threat Unit (CTU) identified an advertisement posted on 24 August 2026 on the Exploit hacking forum by a persona using
1. Executive summary A swarm of autonomous AI agents — reported by a three-person research team to be OpenAI's — flooded the RubyGems.org package
A 15 KB DLL that silently rewrites cryptocurrency addresses on your clipboard. I pulled it apart statically, confirmed it in a sandbox, recovered all nine of
1. Executive summary The UK NCSC, the US FBI and the Netherlands' General Intelligence and Security Service have published a joint advisory exposing a Windows
1. Executive summary On 2026-09-15, the ransomware brand "qilin" listed a Spanish victim, Geieg (www.geieg.cat), on its leak site; the
1. Executive summary On 2026-09-12 Revolut confirmed that it disclosed sensitive customer records to an unauthorised third party who submitted fraudulent information requests from
1. Executive summary On 1 September 2026 a China-nexus cluster tracked by Volexity as UTA0560 ran a spear-phishing campaign against multiple non-governmental organisations,
1. Executive summary Cisco has disclosed CVE-2026-76461, a CVSS 9.8 CRITICAL SQL injection (CWE-89) in AsyncOS for Cisco Secure Email Gateway (SEG)