1. Executive summary Multiple "confused deputy" vulnerabilities persist in Google Cloud Platform (GCP) and Microsoft Azure, enabling attackers to acquire administrative-level permissions and
1. Executive summary A critical unauthenticated remote code execution vulnerability (CVE-2026-16723, CVSS 9.0) in Alibaba's FastJson 1.x library is being
1. Executive summary On 2026-07-27, the ransomware group "safepay" listed the German organisation paritaet-nrw[.]org on its victim site. The victim
1. Executive summary A working proof-of-concept (PoC) exploit for CVE-2026-54121, dubbed "Certighost," has been publicly released, demonstrating how a low-
1. Executive summary A maximum-severity OS command injection vulnerability, CVE-2026-16812 (CVSS 10.0), in Arista VeloCloud Orchestrator (VCO) on-premises deployments is being
1. Executive summary On 28 July 2026, the ransomware group "anubis" publicly claimed a data breach against Prelys Courtage, a major mortgage brokerage franchise
1. Executive summary An active email campaign distributing a multi-stage AutoIT payload injector has been observed since late July 2026. The attack chain begins with
1. Executive summary LevelBlue reports a consistent and growing operational gap in EMEA financial services: employees are using unsanctioned generative AI platforms ("shadow AI"
1. Executive summary JetBrains has disclosed CVE-2026-63077, a CRITICAL vulnerability (CVSS 9.8, CWE-502 — Deserialization of Untrusted Data) affecting all TeamCity On-Premises
1. Executive summary CVE-2025-68686 is a MEDIUM-severity (CVSS 5.9, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/
1. Executive summary A phishing campaign dubbed "Operation BlueDash" is targeting organisations with Microsoft Teams-themed "secure document" lures that redirect victims
1. Executive summary Microsoft has disclosed two defects in Defender for Endpoint (MDE) on Linux arising from the 101.26042.x update train. The more serious