Security Intelligence
Study Tests Zero‑Knowledge Protections in Cloud Password Managers
Researchers reveal 27 attack paths in cloud-based password managers, showing how a compromised provider could...
Security Intelligence
Apple addresses a critical flaw exploited in targeted attacks
Apple patched a critical flaw, CVE‑2026‑20700, that was exploited in targeted attacks on versions prior to the current...
Security Intelligence
Fortinet fixes a critical flaw in FortiClientEMS
Fortinet patched a critical flaw (CVE-2026-21643) in FortiClientEMS 7.4.4 that could allow unauthenticated remote code...
Security Intelligence
February 2026 Microsoft updates include six exploited flaws
Microsoft’s February 2026 Patch Tuesday fixes 59 vulnerabilities, including six actively exploited flaws enabling...
Security Intelligence
BeyondTrust addresses critical pre‑auth RCE vulnerability
BeyondTrust has disclosed a critical pre-auth RCE vulnerability (CVE-2026-1731) impacting Remote Support and Privileged...
Security Intelligence
Global espionage operation employs eBPF rootkit targeting Linux systems
A global espionage campaign targeting government and critical infrastructure uses obfuscated web shells, a custom eBPF...
Security Intelligence
POC available for critical n8n remote command execution flaw
A critical n8n vulnerability with a public proof of concept allows authenticated users to execute system-level commands...
Security Intelligence
CISA flags critical SolarWinds vulnerability as exploited
CISA has confirmed active exploitation of a critical remote code execution vulnerability in SolarWinds Web Help Desk,...
Security Intelligence
Update: Chinese state‑linked actors compromised Notepad++ update infrastructure
Chinese state-linked attackers compromised Notepad++ update infrastructure, delivering malicious installers via a...
Security Intelligence
Chinese state‑linked actors compromised Notepad++ update infrastructure
Chinese state-linked attackers compromised Notepad++ update infrastructure, delivering malicious installers via a...
Security Intelligence
Critical Ivanti EPMM vulnerabilities under active exploitation
Critical Ivanti EPMM vulnerabilities are under active exploitation, allowing unauthenticated remote code execution &...
Security Intelligence
Public PoC and probing reported for max‑severity Oracle Proxy flaw
Maximum-severity Oracle WebLogic vulnerability (CVE-2026-21962) is being actively probed, enabling unauthenticated...