Debian Linux Kernel Update Carries 1,313 CVEs — What That Number Actually Means
A record-sized Debian kernel advisory reflects structural changes in how CVEs are assigned, not necessarily…
Year: 2026
Small Oversights, Real Consequences: NetScaler and FortiMail Zero-Days Lead a Busy Week
Actively exploited vulnerabilities, AI-assisted coding risks, and ransomware arrests headline a week where attackers continued…
US Water Infrastructure Faces Compounding Cyber Risk With No Comprehensive Fix in Sight
Iranian attacks on water systems across 12 states have exposed a sector where poor cyber…
China-Linked Warlock Group Targets Critical Infrastructure via SharePoint Vulnerabilities
A ransomware group with ties to China has exploited SharePoint flaws to breach a water…
CISA Flags Zammad Privilege Escalation Flaw as Actively Exploited
A privilege management vulnerability in the Zammad help desk platform has been added to CISA's…
AI Is Compressing Post-Compromise Attack Timelines, Microsoft Warns
Microsoft says threat actors are using artificial intelligence to accelerate attacks after initial access, shrinking…
GitLab Patches Critical AI Gateway Flaw Affecting Self-Hosted Deployments
A CVSS 9.9-rated vulnerability in GitLab's AI Gateway could allow an authenticated user to execute…
Agentic AI Weaponised in Zero-Day Attack Against Dutch Vulnerability Disclosure Body
The Dutch Institute for Vulnerability Disclosure was targeted by an attack chaining two Zammad zero-days,…
Zammad Zero-Days Used to Breach Dutch Vulnerability Disclosure Body in Apparent AI-Assisted Attack
Two chained critical flaws in the Zammad helpdesk platform gave attackers root access to DIVD…
China-Linked Group Targets AI Policy Experts in Credential-Theft Campaign
Proofpoint has identified a phishing operation attributed to TA419 that impersonated U.S. policy figures and…