Vulnerabilities

Flat white line-art of an issue card linked to a padlock guarding a stack of repository panels — the "GitLost" GitHub disclosure.

Vulnerabilities

"GitLost" Disclosure: Researchers Say GitHub Agentic Workflows Could Leak Private Repository Data

An agentic-workflow data-exposure disclosure with organization-wide DevSecOps implications — defender review this week.

Flat white line-art of a single large chatbot speech bubble linked to a cloud outline — Google Dialogflow CX "Rogue Agent" vulnerability disclosure.

Vulnerabilities

Researchers Disclose Google Dialogflow CX "Rogue Agent" Flaw That Could Have Enabled AI Chatbot Data Theft

An AI-agent identity disclosure with cloud-defender implications — Dialogflow CX posture review this week.

Flat white line-art of a shield beside a server rack with a single patch panel — Adobe ColdFusion maximum-severity flaw actively exploited.

Vulnerabilities

Maximum-Severity Adobe ColdFusion Flaw Now Actively Exploited, Infosecurity Magazine Reports

A maximum-severity ColdFusion flaw under active attack — accelerated patch verification this week.

Linux

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86

A long-standing KVM finding lands with cloud-provider implications — defender posture review this week.

Flat white line-art of a network appliance beside a magnifying lens over a warning sign — NetScaler CVE-2026-8451 under attack.

Vulnerabilities

NetScaler CVE-2026-8451 Under Attack as Dark Reading Sharpens the CitrixBleed Comparison

The CitrixBleed-echo NetScaler flaw draws active attack coverage — defender teams accelerate patch verification this week.

Flat white line-art of a load-balancer appliance routing two lines to server stacks — Progress Kemp LoadMaster CVE-2026-8037 advisory.

Vulnerabilities

Progress Publishes Advisory for Critical Kemp LoadMaster Flaw CVE-2026-8037

A pre-authenticated critical vulnerability in a widely-deployed load balancer — patch verification for defender teams this week.

Flat white line-art of a network appliance beside a shield and a patch tag — Citrix NetScaler CVE-2026-8451 patch advisory.

Vulnerabilities

Citrix Patches Six NetScaler Flaws, Including CVE-2026-8451 With Echoes of CitrixBleed

Six NetScaler flaws, one with echoes of CitrixBleed — defender teams stay in patch-verification posture this week.

Flat white line-art of a shield with a single hammer above it — Microsoft Defender CVE-2026-33825 BlueHammer vulnerability.

Vulnerabilities

Microsoft Defender Flaw CVE-2026-33825, 'BlueHammer,' Tied to Ransomware Activity

Another Defender zero-day for defender teams to verify — patch cycle plus KEV watch this week.

Flat white line-art of one highlighted building linked to a wide row of faint identical buildings — Oracle PeopleSoft campaign reportedly reaching about 100

Data Breaches

Nissan Oracle PeopleSoft Campaign Reportedly Targeted 100 Organizations

One confirmed victim, a reported 99 more not yet named — Oracle PeopleSoft customers stay in patch-verification posture this week.

Flat white line-art of two phones with proximity-share arcs and a shield — AirDrop and Quick Share flaws across five billion devices.

Mobile Security

Researchers Disclose AirDrop and Quick Share Flaws Affecting Five Billion Devices

Two researchers mapped the proximity-sharing protocols behind AirDrop and Quick Share and found six flaws spanning five billion Apple and Android devices, with vendor fixes only partly shipped.

Flat white line-art of a remote-desktop monitor, a credential card and a cloud — SimpleHelp CVE-2026-48558.

Vulnerabilities

SimpleHelp CVE-2026-48558 Exploited to Deliver TaskWeaver and Djinn Stealer

A critical remote monitoring and management vulnerability is under active exploitation to deliver an infostealer that hunts cloud and AI development credentials — and it is now on CISA's KEV list.

Flat white line-art of an ERP panel, a payment-card form and an alert triangle — Oracle EBS Payments CVE-2026-46817.

Vulnerabilities

Oracle E-Business Suite Payments Flaw CVE-2026-46817 Under Active Exploitation

Another Oracle product line under active exploitation — high-priority patch verification this week.

See all