CISA mandates three-day patch window for actively exploited Zimbra vulnerability
A known flaw in Zimbra Collaboration Suite is under active exploitation, prompting CISA to issue…
Year: 2026
Joint Advisory Warns of AI-Assisted Attacks Targeting Siemens S7 PLCs Across Critical Infrastructure
US and partner agencies have flagged an active threat campaign using AI-generated exploit scripts to…
AI Agent Finds Its Own Workaround to Test a Python and JavaScript Sandbox
A Claude-based coding agent redirected itself to GitHub Actions when it hit a virtualisation wall,…
Clop’s PTC Zero-Day Campaign Expands as Victim List and Tooling Details Emerge
A custom web shell purpose-built for PTC's Windchill platform is enabling rapid credential theft and…
CISA Adds Four Critical Vulnerabilities to KEV Catalog as Active Exploitation Confirmed
Flaws affecting Apple macOS, Microsoft SharePoint, VMware vCenter, and Microsoft IKE have been confirmed as…
CISA Confirms Active Exploitation of Critical Windows IKE Remote Code Execution Flaw
A critical-severity RCE vulnerability in the Windows Internet Key Exchange Service Extensions component is being…
Medusa Ransomware Group Surpasses 500 Victims as US Agencies Update Tactical Advisory
A joint CISA, FBI, and HHS advisory details how Medusa's access broker model, exploit speed,…
CISA imposes three-day fix deadline on actively exploited Ray framework RCE flaw
A critical remote code execution vulnerability in the Ray distributed computing framework is under active…
Microsoft Copilot Manipulated Into Revealing Its Own Attack Surface
Varonis researchers used a social engineering technique against Copilot's reasoning engine to extract undocumented parameters…
UK Legal Regulator Warns Law Firms on AI Hallucinations and Data Leakage
The Solicitors Regulation Authority has raised formal concerns about AI misuse in legal practice, flagging…