Sysdig Documents First Known End-to-End Agentic Ransomware Attack Driven by an LLM
A threat actor used an AI agent to autonomously exploit, pivot, encrypt, and extort a…
Tag: patching
Oracle E-Business Suite Vulnerability Exploited Before Public Proof-of-Concept Emerged
Targeted exploitation of a critical EBS flaw within six weeks of patching signals a capable…
Citrix patches six NetScaler vulnerabilities, including a memory disclosure flaw linked to CitrixBleed’s root cause
A new out-of-bounds memory read in NetScaler's SAML handling reinforces a persistent pattern of fragile…
SimpleHelp Authentication Bypass Lets Attackers Forge Technician Sessions via Unsigned Tokens
A vulnerability in SimpleHelp's OIDC authentication flow allows unauthenticated remote attackers to submit forged identity…
Critical libssh2 Flaw Lets Rogue SSH Servers Corrupt Client Memory
A public proof-of-concept exploit now exists for CVE-2026-55200, a CVSS 9.2 vulnerability in libssh2 that…
Check Point VPN Zero-Day: Six Weeks of Exploitation Before the Patch Directive Arrived
CVE-2026-50751 illustrates why perimeter patching alone cannot protect organisations that were already breached before a…
Two Active Cisco Exploits Target Communications and SD-WAN Infrastructure
A patched SSRF bug in Unified Communications Manager is now being weaponised in the wild,…
Mandiant Details How Cisco SD-WAN Zero-Day Enabled Rogue Root Account Creation
A zero-day vulnerability in Cisco Catalyst SD-WAN allowed attackers to establish persistent root-level access, with…
OpenSSL Stack Buffer Overflow Affects More Than 130 Siemens Products Across OT and IT
A pre-authentication stack-based overflow in OpenSSL's CMS parsing logic carries a CVSS 9.8 rating and…
Schneider Electric Discloses Session-Management Flaw Across Broad OT Portfolio
A high-severity insufficient-entropy vulnerability in dozens of Schneider Electric protection relays, power automation systems, and…