Thirteen Vulnerabilities Found in Botslab G980H Dashcams, No Vendor Patches Available
CISA has published an advisory detailing a broad set of firmware weaknesses in Botslab G980H…
Year: 2026
CISA Sets Out a ‘Quality Era’ Roadmap for the CVE Program
A new CISA white paper addresses long-standing data quality problems in the CVE program, but…
Active Exploitation of Critical F5 BIG-IP APM Zero-Day Demands Immediate Patching
A heap-based buffer overflow in F5 BIG-IP Access Policy Manager is being actively exploited, earning…
AI Governance Gap: A Proposed Framework for Managing Frontier AI Risk in Critical Infrastructure
Researchers at Auburn University's McCrary Institute have outlined an AI Assurance Compact, calling on government,…
Meta’s Muse AI Assistant Launched With a Zero-Day Vulnerability on macOS
A serious security flaw in Meta's Muse AI assistant gave attackers broad access to affected…
CLOSEDQUORUM: Windows Malware That Delegates Attack Decisions to a Panel of AI Models
Cisco Talos has documented what it believes is the first Windows implant to use a…
New China-Aligned Threat Actor UTA0565 Joins Campaign Exploiting Chrome and Windows Zero-Days
Volexity identifies a previously undocumented group using a shared exploit kit and novel malware to…
Unpatched Tool Exploits Disk-Fill Technique to Block Microsoft Defender Updates
A proof-of-concept published on GitHub can halt Defender platform and signature updates by exhausting available…
Linux Kernel KVM Flaw on ARM64 Exposes Host Memory to Guest Virtual Machines
A use-after-free vulnerability in ARM64 KVM code allows a guest VM to read and write…
EvilTokens Phishing Service Dismantled: Two Arrested, 50 Sites Seized After 12,000 Inboxes Compromised
A coordinated takedown by Microsoft, law enforcement, and a coalition of technology partners has disrupted…