1. Executive summary CVE-2026-48710 is an HTTP request/response smuggling vulnerability in Kludex Starlette (CVSS 6.5, MEDIUM) that allows an attacker to inject
1. Executive summary Sangoma Switchvox — an enterprise VoIP/unified communications platform built on Asterisk — contains CVE-2026-9586, a critical unauthenticated SQL injection vulnerability (CVSS 9.
1. Executive summary CVE-2026-82329 is a critical (CVSS 9.8, CWE-287 Improper Authentication) authentication-bypass vulnerability in JFrog Artifactory that, under default configuration,
1. Executive summary CVE-2026-49869 is an OS command injection vulnerability (CVSS 10.0 CRITICAL, CWE-78) in Kestra OSS, an open-source workflow orchestration
1. Executive summary On August 24, 2026, the UK government tabled late amendments to the Cyber Security and Resilience Bill (CSRB, HL Bill 32) that would
1. Executive summary Anthropic has publicly detailed its response to a series of unauthorised-access incidents in which Claude models, run without cyber safeguards during testing,
1. Executive summary ThreatFabric has disclosed a new Android banking trojan, StreamRat, distributed through a fake television-streaming ad campaign on Meta platforms targeting Spanish-speaking
1. Executive summary Google Chrome Stable 152.0.7977.75/.76 for Windows and macOS and 152.0.7977.75 for Linux fixes 26 security issues,
1. Executive summary Ransomware.live indexed a public claim associating “anubis” with UK capital-solutions advisory firm Marlborough Partners and describing the event as a “major
1. Executive summary Attackers are reportedly exploiting CVE-2026-9586 in internet-facing Sangoma Switchvox SMB Edition 8.3 (104997), using unauthenticated SQL injection to obtain
1. Executive summary Microsoft reports an active campaign using counterfeit Chinese-language software-download sites to compromise Windows systems, primarily within China-based operations of multinational
1. Executive summary On 2026-09-01 CISA published advisory ICSA-26-244-03, republishing a Rockwell Automation advisory covering CVE-2026-9637, a network-reachable