1. Executive summary Rapid7 and Microsoft have disclosed CVE-2026-63520, a high-severity (CVSS 8.1) remote code execution vulnerability in Microsoft SharePoint Business Connectivity
1. Executive summary Check Point Research has published analysis of an ongoing Operation Dream Job campaign active since early 2026, primarily targeting the global defense, aerospace,
1. Executive summary CVE-2026-72898 is a CVSS 10.0 CRITICAL SQL injection vulnerability (CWE-89) in Metabase, the open-source business intelligence and data
1. Executive summary CVE-2026-68820 is a use-after-free vulnerability (CVSS 7.0, HIGH) in the Windows Ancillary Function Driver for WinSock (afd.sys)
1. Executive summary Microsoft's August 2026 Patch Tuesday addresses 418 vulnerabilities across its product portfolio, with 62 rated critical. One vulnerability is confirmed exploited
1. Executive summary CVE-2026-20349 is a HIGH-severity (CVSS 8.6) heap inspection vulnerability in the Remote Access SSL VPN service of Cisco Secure
1. Executive summary OpenAI has launched GPT-5.6-Cyber, a cybersecurity-focused AI model with significantly reduced refusal rates for dual-use offensive security tasks
1. Executive summary CISA, FBI, NSA, DC3, USSS, and the Republic of Korea's KNPA published a joint #StopRansomware advisory on 10 August 2026 warning
1. Executive summary Microsoft has disclosed that the financially motivated actor Storm-1175 — assessed as China-linked but with no MITRE ATT&CK profile, meaning
1. Executive summary North Korean state-sponsored actor Kimsuky (MITRE G0094) is operating local large language model (LLM) environments and integrating AI capabilities into its attack
1. Executive summary Microsoft Threat Intelligence has published a detailed technical analysis of DeadLock, a Rust-based ransomware encryptor in active deployment since July 2025. DeadLock
1. Executive summary Levi Strauss is investigating a data breach after attackers used social engineering to access three employees' work computers and exfiltrate "certain