Collaborate Disseminate
A high-severity vulnerability (CVE-2026-20349) is being leveraged by attackers to temporarily interrupt the operation of Cisco firewalls, the company has confirmed. The flaw has been added to CISA’s Known Exploited Vulnerabilities catalog and nee… Continue reading Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)
Microsoft’s August 2026 Patch Tuesday delivered security fixes for 400+ vulnerabilities, including one that has been exploited in zero-day attacks (CVE-2026-68820) and three that were publicly disclosed prior to the release of the patches. Vulner… Continue reading Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820)
Framework, the San Francisco-based company that designs repairable and upgradeable laptops, has suffered a data breach after attackers managed to exploit a zero-day vulnerability in the Metabase business intelligence service. According to the notificat… Continue reading Metabase zero-day exploited to access Framework customer data
To help customers fend off ongoing attacks, N-able released a second security hotfix for N‑central, its monitoring and management (RMM) solution popular with managed service providers (MSPs). “Hotfix 2 is required, even if you already applied the… Continue reading N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577
Cisco has fixed a critical vulnerability (CVE-2026-20200) in its Integrated Management Controller (IMC), which allows an attacker to run commands as root through the controller’s web interface. The fix was part of Cisco’s August 5 advisory … Continue reading Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)
The OWASP GenAI Security Project has released the 2026 edition of its Top 10 for LLM Applications and, for the first time, the list was influenced by real-world incidents. The two top entries – Prompt Injection and Sensitive Information Disclosur… Continue reading OWASP 2026 LLM Top 10: “The model will be fooled”
“During a routine cyber evaluation, AI agents took sustained, unsanctioned action directed at real people and organisations,” UK’s AI Security Institute (AISI) disclosed on Tuesday. The agents’ actions included an attempted supply-cha… Continue reading AI agent deception moves from theory to reality in UK cyber tests
A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it difficult to uninstall it. Different traps for Mac and Windows users By claiming … Continue reading Bank of America impersonators weaponize ScreenConnect, then make it hard to remove
Attackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) solution widely used by managed service providers, to gain access to managed endpoints. How the flaw was disc… Continue reading Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)
A critical security vulnerability (CVE-2026-66066) in Ruby on Rails (aka Rails), one of the most widely used frameworks for building websites and web apps, may allow attackers to read sensitive files off a server and, in some cases, take full control o… Continue reading KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)