Rockwell Automation FactoryTalk Activation Manager Privilege Escalation Patched
A local vulnerability in FactoryTalk Activation Manager versions 5.02 and below allows an authenticated attacker…
Year: 2026
ShinyHunters Claims McKesson Data Theft as Extortion Deadline Passes
A four-day intrusion at one of North America's largest healthcare distributors has exposed customer data…
Hiding Prompt Injection in Legal Filing
What security leaders need to know about the affected systems.
Aurora Ransomware Group Leverages AI Coding Tool in Targeted Intrusions
Researchers have linked the Russian-speaking Aurora ransomware operation to the use of Cursor, an AI-powered…
PaperCut NG/MF Unsafe Reflection Vulnerability Added to CISA’s Known Exploited Vulnerabilities Catalogue
CVE-2026-82078 allows arbitrary Java bytecode execution under the PaperCut server process and can be chained…
ChatGPT Work Combines Agentic Capabilities With an Open Security Question
OpenAI's new ChatGPT Work product bundles code execution, full browser automation, a persistent filesystem, and…
AI Kill Switch Legislation Is Coming — and Organisations Are Not Ready
Proposed laws that would require companies to throttle, suspend, or shut down AI agents raise…
ZBT Routers Shipped With Two Factory-Installed Implants Granting Root Access Without Authentication
VulnCheck has identified two undocumented backdoors embedded in firmware from Chinese router manufacturer Shenzhen Zhibotong…
Two Australians Arrested Over TeamPCP Supply Chain Attacks
The Australian Federal Police have charged two Western Australia men linked to a cybercrime collective…
CISA Adds Six Actively Exploited Vulnerabilities Spanning Microsoft, Linux, Red Hat and Citrix
The US cybersecurity agency's Known Exploited Vulnerabilities catalogue grew by six entries on 26 August,…