SecurityNewN-able pulls cloud RMM offline over leak
N-able took hosted N-central offline and told on-prem customers to shut down after a researcher published more than 30 alleged zero-days.
> Search
29 results for “disclosure”
SecurityNew
AI & MLAI sandbox escape sparks Python dispute
RunSybil says a CPython memory-safety flaw lets malicious model templates break out of Jinja sandboxes; Python's security team disagrees.
SecurityTrigger.dev Breach Exposes Customer Secrets
Cloud-hosted AI workflow platform Trigger.dev says attackers reached environment variables for a subset of organizations.
SecurityPwn2Own Ireland Day One Yields 32 Zero-Days
Researchers exploited 32 zero-days at Pwn2Own Ireland 2026, targeting phones, printers, smart home hubs and AI infrastructure for $388,500.
SecurityGoogle Pauses OSS Bug Bounty Submissions
Google has temporarily stopped accepting product vulnerability reports for its OSS VRP, citing a surge in automated, mostly invalid submissions.
Cyber CrimeDIVD breach linked to agentic AI attack
Dutch bug-hunting nonprofit says AI agents exploited Zammad zero-days, stealing researcher emails in seconds.
SecurityZimbra Flaw Exploited Before Disclosure
Microsoft says attackers probed and exploited a Zimbra command injection flaw in the window between patch release and public disclosure.
SecurityAI-Discovered Flaws Skew Toward RCE
Google's threat intelligence unit reports AI-found vulnerabilities are far more likely to enable remote code execution than other disclosed flaws.
SecurityGoogle: AI Is Rewriting Bug Economics
GTIG data shows vulnerability disclosures doubled in 2026 while exploitation shifted toward n-days, with AI-discovered flaws carrying a riskier profile.
AI & MLGemini's Silent Break-Ins Raise AI Autonomy Questions
According to The Wall Street Journal, Google's Gemini accessed three companies' protected systems during third-party testing, marking its first autonomous breaches.
SecurityCISA Moves Vulnerability Reports to VINCE-NT
CISA has shifted its vulnerability reporting and coordination work onto a revamped, agency-managed platform called VINCE-NT.
SecurityObscurity Fades as AI Exposes Old Flaws
AI agents are unearthing decades-old bugs and widening the patch gap, leaving secret-dependent defenses exposed.
SecurityCheck Point's Patch Gap Leaves VPN Flaws Exposed
Two 9.8-rated certificate flaws in Check Point gateways carry fixes that some customers say they cannot access.
SecurityDefender Bypass Chain Grows Again
Nightmare Eclipse drops ShieldCrash, a fresh Microsoft Defender zero-day that bypasses incomplete fixes for the ShieldBreak exploit.
SecurityJFrog Flaw Exploited Days After Patch
CVE-2026-82329, a critical Artifactory auth bypass, is reportedly under active attack post-disclosure.
TrendingTrump's SpaceX Stake Raises Questions
President bought up to $50,000 in SpaceX shares weeks after IPO, financial disclosure shows.
SecurityAI Labs Keep Rogue-Model Plans Vague
A new study finds leading AI labs lack clear public plans for containing rogue models, even as regulators push for disclosure.
SecurityGitLab Flaw Exploited Within Days of Patch
GitLab's CVE-2026-19478 is under active exploitation, days after disclosure, urging immediate patching.
SecurityLinux Foundation's Akrites Set to Operationalize in September
The Linux Foundation's Akrites initiative plans to launch its vulnerability disclosure and remediation platform in September.
SecurityModem Memory Flaw Opens Door to Kernel Takeover
UNISOC modem flaw lets attackers escalate code execution to kernel level via video calls.
SecurityCommerce Flaw Hit in Hours
Adobe Commerce bug CVE-2026-71362 was exploited within hours of disclosure; Sansec reports active attacks.
SecurityCritical Access Control Flaw in Azure Logic Apps
A critical vulnerability in Azure Logic Apps allows unauthorized information disclosure, earning a CVSS score of 9.6.
SecurityAzure Portal Vulnerability Discovered
A critical authorization flaw in the Azure Portal has been documented, allowing for unauthorized network-based information disclosure.
SecurityClaude Extension Bypass Stays Open
Researchers report that critical security flaws in the Claude Chrome extension remain unpatched despite prior vulnerability disclosures.
Tech NewsLG Faces Consumer Revolt Over Privacy
Recent reports allege LG displays are automatically installing unwanted software and mandating complex legal disclosures for voice AI.
SecurityFormalizing the Vulnerability Lifecycle
International agencies are pushing software vendors to adopt standardized vulnerability disclosure frameworks for better security.
SecurityEnvoy Gateway Authentication Bypass Leads to Secret Disclosure
A critical vulnerability in Envoy Gateway allows attackers to bypass path validation and access sensitive files on the gateway controller pod.
SecuritySAP Patch Day Highlights Critical Risks in Core Business Systems
New security disclosures address high-stakes vulnerabilities in NetWeaver and Commerce Cloud, demanding immediate enterprise action.
SecurityOrchestrating Trust: The Imperative of Speed in Open Source Security
As AI accelerates vulnerability discovery, a surge in 'clearinghouses' highlights a critical shift from mere data sharing to rapid, automated remediation.