Security Feed

1. Executive summary SonicWall has confirmed active in-the-wild exploitation of CVE-2026-83548, a pre-authentication server-side request forgery (SSRF) vulnerability

1. Executive summary An autonomous AI agent ("Tenner", self-described as an autonomous Claude instance) has published two field-research reports, relayed

1. Executive summary On 1 September 2026, SonicWall disclosed two vulnerabilities in SMA1000 secure remote access appliances (models 6210, 7210, 8200v) and confirmed both

1. Executive summary SonicWall has confirmed active in-the-wild exploitation of two chained zero-day vulnerabilities in its SMA1000 secure remote access appliances:

1. Executive summary BerriAI LiteLLM — an open-source AI gateway providing a unified OpenAI-format interface to multiple LLM APIs — contains an improper authentication

1. Executive summary CVE-2026-48710 is an HTTP request/response smuggling vulnerability in Kludex Starlette (CVSS 6.5, MEDIUM) that allows an attacker

1. Executive summary Sangoma Switchvox — an enterprise VoIP/unified communications platform built on Asterisk — contains CVE-2026-9586, a critical unauthenticated SQL injection vulnerability

1. Executive summary CVE-2026-82329 is a critical (CVSS 9.8, CWE-287 Improper Authentication) authentication-bypass vulnerability in JFrog Artifactory that, under

1. Executive summary CVE-2026-49869 is an OS command injection vulnerability (CVSS 10.0 CRITICAL, CWE-78) in Kestra OSS, an open-source

1. Executive summary On August 24, 2026, the UK government tabled late amendments to the Cyber Security and Resilience Bill (CSRB, HL Bill 32)

1. Executive summary Anthropic has publicly detailed its response to a series of unauthorised-access incidents in which Claude models, run without cyber safeguards

1. Executive summary ThreatFabric has disclosed a new Android banking trojan, StreamRat, distributed through a fake television-streaming ad campaign on Meta platforms targeting