Vulnerabilities
Palo Alto Networks Patches 13 Vulnerabilities in Coordinated Advisory
A large-scale Palo Alto patch cycle — defender verification across product fleets this week.
Latest
Policy & Government
UK Government Launches “Cyber Shield” Agentic-AI Defense Plan and Cyber Resilience Pledge
A national-scale agentic-AI defense plan from the UK — defender teams and industry partners align this week.
Cybercrime
Interpol Reports 5,800 Arrests Across 97 Countries in Global Cybercrime Crackdown
A scale-significant multi-country cybercrime disruption — law-enforcement coverage this week.
Supply Chain Attack
npm 12 Ships With Install Scripts Disabled by Default to Cut Supply-Chain Risk
A meaningful ecosystem-policy signal from npm after months of contributor-account compromises — defender developers review CI/CD posture this week.
Vulnerabilities
Microsoft Patches RoguePlanet Defender Flaw That Could Grant SYSTEM Privileges
The RoguePlanet Defender saga closes with Microsoft's patch — defender teams accelerate verification this week.
Linux
Researchers Disclose "GhostLock," a 15-Year-Old Linux Flaw Enabling Root and Container Escape
Another long-standing Linux finding lands with defender-team implications across distributions and container platforms.
Supply Chain Attack
Researchers Disclose "HalluSquatting" Technique Targeting AI Coding Assistants
An AI-hallucination supply-chain finding with organization-wide implications — defender review this week.
Vulnerabilities
Google Awards $250,000 Bounty for Linux KVM Guest-to-Host Escape
A significant Google bounty award draws attention to a Linux virtualization finding — defender review continues this week.
Vulnerabilities
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and UniFi OS
A multi-product UniFi patch cycle from Ubiquiti — defender verification across product fleets this week.
Vulnerabilities
CISA Adds Four Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
Four KEV additions across three vendors — defender patch-verification work concentrates this week.
Vulnerabilities
BeyondTrust Patches Critical Authentication-Bypass Flaws in Remote Support and PRA
A critical vendor advisory across two remote-access products — defender teams accelerate patch verification this week.
Vulnerabilities
"GitLost" Disclosure: Researchers Say GitHub Agentic Workflows Could Leak Private Repository Data
An agentic-workflow data-exposure disclosure with organization-wide DevSecOps implications — defender review this week.