121 article(s) in our index mention this organisation.
A critical zero-day vulnerability in F5 BIG-IP Access Policy Manager (APM) has been actively exploited by threat actors. The flaw allows unauthenticated remote code execution, and F5 has released hotfixes to address the…
Two Colorado water utilities were targeted in a cyberattack that aimed to disrupt operations by altering industrial control system settings. While the exact actors remain unknown, the incidents align with a broader campa…
The CISA is ending its weekly vulnerability bulletins, shifting to a risk-based approach to vulnerability management. This change is driven by the observation that attackers primarily exploit a small subset of vulnerabil…
CISA is ending its weekly vulnerability bulletin in favor of a risk-based approach, shifting focus to actively exploited vulnerabilities through its KEV catalog. This change is intended to combat alert fatigue and improv…
The CISA released guidance on using cyber decoys to bolster an organization’s ability to detect and respond to cyberattacks, particularly those leveraging living-off-the-land techniques. This strategy is designed to comp…
A critical vulnerability in Cisco Secure Email Gateway software (AsyncOS) has been actively exploited in the wild, allowing unauthenticated attackers to execute arbitrary commands with root privileges. Cisco has released…
A critical zero-day vulnerability (CVE-2026-76461) in Cisco Secure Email Gateway is actively being exploited in the wild, allowing attackers to execute arbitrary commands with root privileges. Cisco has released IoCs, bu…
The CISA, in collaboration with the FBI and international partners, released an advisory emphasizing the need for more transparent and accountable communication during cybersecurity outages and incidents. The goal is to…
Hackers are using a novel technique called GuardBreaker to intentionally trigger AI safety mechanisms in malware analysis, specifically by inserting nuclear weapon prompts into malicious scripts. This tactic, utilized by…
This week’s security news is dominated by a massive wave of Android vulnerabilities (200 total), a complex phishing campaign targeting Singpass accounts, and a growing number of exposed Plex servers. Beyond that, a Chin…
A critical NetScaler vulnerability (CVE-2026-19490) is being actively exploited in the wild, prompting a CISA warning and urging immediate patching. Threat actors have been targeting NetScaler appliances globally, highli…
ST Engineering iDirect has released patches to address several critical vulnerabilities in its iQ-Series Terminals (Update A). These vulnerabilities include unauthorized access to device information, denial-of-service at…
Cisco has warned organizations about a critical vulnerability in their Secure Firewall Management Center (FMC) that has been actively exploited by various threat actors, including state-sponsored groups and ransomware ga…
A critical remote code execution (RCE) vulnerability in Fortinet products is being actively exploited by threat actors to deploy the PivotC2 RAT. This allows attackers to gain remote access and control over vulnerable de…
Several major industrial automation vendors – Schneider Electric, Siemens, and Aveva – released Patch Tuesday advisories addressing critical and high-severity vulnerabilities in their Industrial Control Systems (ICS) pro…
Microsoft released a record-breaking 974 security updates this month, including two zero-day vulnerabilities that have been actively exploited in the wild. These updates address a wide range of flaws across its Windows,…
A critical SQL injection vulnerability (CVE-2026-9586) in Sangoma Switchvox is being actively exploited in the wild, allowing attackers to execute arbitrary code and access sensitive data. The US Cybersecurity and Infras…
The CISA, FBI, and international partners have released guidance for critical infrastructure organizations on how to effectively communicate during IT and OT outages. The goal is to minimize panic, manage expectations, a…
GeoNetwork, a geospatial metadata catalog used in many government geoportals, has two vulnerabilities that can be chained to achieve unauthenticated remote code execution (RCE). The vulnerabilities stem from a missing au…
China-linked cyber espionage group, Fire Ant, has expanded its campaign beyond VMware to compromise Cisco routers and TACACS servers, leveraging a sophisticated toolkit to steal credentials and suppress logging. The grou…
