Security Intelligence
Researchers report a maximum‑severity flaw in a pac4j JWT library
A pac4j-jwt flaw (CVE-2026-29000) allows attackers to bypass authentication by exploiting how encrypted JWTs are...
Security Intelligence
CISA warns of remote code execution risk in VMware Aria Operations
CISA added a VMware Aria Operations flaw (CVE-2026-22719) to its KEV catalog amid reports of active exploitation....
Security Intelligence
Cyber spillover risks amid the February 2026 Middle East escalation
Escalating conflict in the Middle East raises cyber spillover concerns as Canada and the UK warn of potential Iranian...
Security Intelligence
Critical TLS authentication bypass impacts VMware Tanzu
Broadcom patches CVE-2025-68121, a critical TLS flaw in Go affecting multiple VMware Tanzu products, including RabbitMQ...