MikroTik RouterOS Authentication Flaw Has No Patch — Mitigations Are Your Only Option
A CISA-published advisory details a brute-force vulnerability affecting all versions of MikroTik RouterOS and Cloud…
Year: 2026
OpenAI Agent’s Accidental Attack on Hugging Face Offers a Detailed Blueprint of Machine-Speed Intrusion
A five-day autonomous campaign exploiting a JFrog Artifactory zero-day, Kubernetes token theft, and a self-provisioned…
NVIDIA and 36 Partners Form Open Secure AI Alliance, Release NOOA Security Framework
A broad coalition of cloud, security, and AI vendors is pooling resources to build open…
Coca-Cola Confirms Data Stolen from Fairlife Subsidiary Following Ransomware Attack
The beverage giant has acknowledged a data breach affecting its Fairlife unit, with ransomware identified…
Arista patches actively exploited VeloCloud Orchestrator flaw as CISA adds it to KEV catalog
A maximum-severity OS command injection vulnerability in VeloCloud Orchestrator On-Prem is being exploited in the…
Fortinet FortiOS Patch-Bypass Vulnerability Added to CISA’s Known Exploited List
A newly catalogued flaw in FortiOS allows post-compromise attackers to circumvent a previously deployed patch,…
Israeli Firm Cognyte Selling Mobile Cell-Site Simulator to US Law Enforcement
A contract with the state of Texas reveals that Cognyte's FalcoNet device can impersonate a…
ShinyHunters claims Ernst & Young breach via supply-chain attack
The extortion group says it obtained credentials to EY systems through a third-party compromise, adding…
Senator Calls on Federal Agencies to Retire Legacy Public-Facing VPNs
A formal letter to OMB, CISA and NIST urges binding directives, procurement rule changes and…
The Shadow Market Reselling Stolen LLM Access at a Discount
An organised ecosystem of token resellers is monetising unprotected AI endpoints, raising real cost and…