Collaborate Disseminate
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports… Continue reading Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads.
Tracked as CVE-2026-66066 (CVSS score: 9.5), the flaw ca… Continue reading Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in unauthenticated remote code execution.
The vulnerability, tracked as C… Continue reading Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical in severity.
The first of the three critical-rated flaws is CVE-2026-5930… Continue reading Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27, triggering a statewide cybersecurity response.
Braham, Plymouth, South St. Paul and Maple Plain have publicly described a pl… Continue reading Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds from international firms for more than nine years.
According to Russian c… Continue reading Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
AI is compressing exploit timelines. The real question isn’t whether your vulnerability management playbook needs to change, it’s which part of it you’ve been getting wrong all along.
The conversation happening in security circles right now goes somet… Continue reading Mythos Asks the Right Question. It Doesn’t Answer It.
Nebula Security says a patched Firefox JIT flaw could be triggered by simply visiting a malicious webpage and was also used to compromise Tor Browser.
Tracked as CVE-2026-10702, the bug provides arbitrary code execution inside the browser’s renderer p… Continue reading Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser
Most organizations have incident response plans, security tools, and technical teams in place. Yet new research suggests that many still lack the coordination, visibility, and executive alignment needed to withstand a serious cyberattack.
According to… Continue reading 73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack
The Federal Security Service of the Russian Federation (FSB) on Wednesday said it charged Telegram founder Pavel Durov for allegedly facilitating terrorist activities and for failing to remove prohibited information in violation of Russian law.
The pr… Continue reading Russia Charges Telegram Founder Pavel Durov With Aiding Terrorist Activity