CISA Adds Seven Actively Exploited Vulnerabilities to KEV Catalog
Seven new entries spanning SQL injection, command injection, authentication failures and request smuggling signal a…
Autonomous AI Agents Are Probing Your Perimeter and Logging What They Find
Field reports from self-directed AI agents reveal that identity verification is rarely the barrier it…
Senator Presses NSA to Update VPN Guidance as Single-Hop Architecture Draws Scrutiny
Ron Wyden has written to the NSA Director asking for clearer public advice on commercial…
SonicWall SMA1000 Zero-Days Chained in Active Attacks Against Enterprise Gateways
Two newly disclosed vulnerabilities in SonicWall's SMA1000 appliances are being exploited in the wild, with…
Anthropic Releases Claude Fable 5.1 With Five Reasoning Tiers and Steep Compute Costs at Upper Levels
The new model raises practical questions about cost management and reasoning-level governance as AI reasoning…
CVE-2026-82329: Active Exploitation of Critical JFrog Artifactory Authentication Bypass
Attackers began minting admin tokens on internet-exposed Artifactory instances within days of a 9.8-rated patch…
Rockwell Automation FactoryTalk Activation Manager Privilege Escalation Patched
A local vulnerability in FactoryTalk Activation Manager versions 5.02 and below allows an authenticated attacker…
ShinyHunters Claims McKesson Data Theft as Extortion Deadline Passes
A four-day intrusion at one of North America's largest healthcare distributors has exposed customer data…
Hiding Prompt Injection in Legal Filing
What security leaders need to know about the affected systems.
Aurora Ransomware Group Leverages AI Coding Tool in Targeted Intrusions
Researchers have linked the Russian-speaking Aurora ransomware operation to the use of Cursor, an AI-powered…