CVE-2026-49869 — Kestra Kestra OSS: Kestra OSS OS Command Injection Vulnerability
1. Executive summary CVE-2026-49869 is an OS command injection vulnerability (CVSS 10.0 CRITICAL, CWE-78) in Kestra OSS, an open-source workflow orchestration
1. Executive summary CVE-2026-49869 is an OS command injection vulnerability (CVSS 10.0 CRITICAL, CWE-78) in Kestra OSS, an open-source workflow orchestration
1. Executive summary On August 24, 2026, the UK government tabled late amendments to the Cyber Security and Resilience Bill (CSRB, HL Bill 32) that would
1. Executive summary Anthropic has publicly detailed its response to a series of unauthorised-access incidents in which Claude models, run without cyber safeguards during testing,
1. Executive summary ThreatFabric has disclosed a new Android banking trojan, StreamRat, distributed through a fake television-streaming ad campaign on Meta platforms targeting Spanish-speaking
1. Executive summary Google Chrome Stable 152.0.7977.75/.76 for Windows and macOS and 152.0.7977.75 for Linux fixes 26 security issues,
1. Executive summary Ransomware.live indexed a public claim associating “anubis” with UK capital-solutions advisory firm Marlborough Partners and describing the event as a “major
1. Executive summary Attackers are reportedly exploiting CVE-2026-9586 in internet-facing Sangoma Switchvox SMB Edition 8.3 (104997), using unauthenticated SQL injection to obtain
1. Executive summary Microsoft reports an active campaign using counterfeit Chinese-language software-download sites to compromise Windows systems, primarily within China-based operations of multinational
1. Executive summary On 2026-09-01 CISA published advisory ICSA-26-244-03, republishing a Rockwell Automation advisory covering CVE-2026-9637, a network-reachable
1. Executive summary CISA has republished a Rockwell Automation advisory (ICSA-26-244-01, 2026-09-01) covering four denial-of-service vulnerabilities in RSLinx Classic
1. Executive summary CISA has republished a Rockwell Automation advisory (ICSA-26-244-05) covering a network-reachable denial-of-service vulnerability — CVE-2021-42260, CWE-
1. Executive summary Leaked training and personnel records from Bauman Moscow State Technical University's Department No. 4 describe a formalised Russian force-generation pipeline