Mandiant reveals how hackers used Cisco SD-WAN zero-day to seize root access
Mandiant has published new details on how attackers exploited a critical Cisco SD-WAN vulnerability — tracked as CVE-2026-20245 — to…
Security
Cybersecurity, vulnerabilities, threats, and defense
DraftKings hacker ‘Snoopy’ gets 18 months behind bars
The 21-year-old who went by the alias “Snoopy” has been sentenced to 18 months in prison for his role in…
F5 Patches Two Critical NGINX Open Source Flaws Allowing Remote Code Execution
F5 has released security updates for two critical vulnerabilities in NGINX Open Source that could allow remote unauthenticated attackers to…
Orphaned AI Agents: The Hidden Access Risk Lurking in Your Network
If an autonomous AI agent accesses your company’s core intellectual property today, can your security team name the person who…
Malicious Edge Extension Used in Ransomware Attack to Escape Browser Sandbox
A malicious Microsoft Edge extension called “Edgecution” has been used in ransomware attacks to break out of the browser sandbox…
Apple patches Beats Studio Buds bug that let nearby attackers eavesdrop
Apple has released a firmware update for its Beats Studio Buds wireless earbuds to fix a high-severity vulnerability that could…
Salesforce disables Klue app after OAuth token abuse exposes customer data
Salesforce has disabled the Klue Battlecards app integration on its platform following a security incident that exposed customer data through…
CISA warns critical Lantronix EDS5000 flaw is being actively exploited
CISA issued an alert on Tuesday warning that a critical vulnerability in Lantronix EDS5000 Series devices is being actively exploited,…
A New Breed of AI-Powered Cyberthreat Is Here
Cybersecurity followed predictable patterns for years. A researcher finds a bug, a CVE gets filed, vendors issue patches. The whole…
Cordyceps CI/CD Flaws Put 300+ GitHub Repos at Risk of Supply-Chain Attacks
Security researchers have identified a new class of CI/CD vulnerability that lets attackers hijack workflows and compromise open-source supply chains….