CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability

The SharePoint remote code execution vulnerability CVE-2026-20963, which Microsoft patched in January, has been exploited in the wild.
The post CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability appeared first on SecurityWeek.
Continue reading CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability

Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks

Amazon found evidence that the FMC software vulnerability has been exploited since late January, and found links to Russia.
The post Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks appeared first on SecurityWeek.
Continue reading Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks

Arcjet enables inline defense against prompt injection in production AI systems

Arcjet has released AI Prompt Injection Protection, a new capability designed to stop prompt injection attacks before they reach production AI models. The feature detects hostile prompts at the application boundary and gives developers a decision point… Continue reading Arcjet enables inline defense against prompt injection in production AI systems

Keysight SBOM Manager simplifies global cybersecurity compliance and software transparency

Keysight Technologies has launched Keysight SBOM Manager, a new solution designed to help organizations meet growing global cybersecurity and software transparency requirements, led by the European Union’s Cyber Resilience Act (CRA). The solution provi… Continue reading Keysight SBOM Manager simplifies global cybersecurity compliance and software transparency

Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaults

Samba 4.24.0 arrived carrying a set of Kerberos security changes aimed at Active Directory deployments. The release fixes a vulnerability, extends audit coverage for sensitive AD attributes, and introduces configuration options to counter two related K… Continue reading Samba 4.24.0 ships Kerberos hardening and a CVE fix for domain encryption defaults