SecurityCTEM shifts security focus from scans to attack paths
Continuous threat exposure management broadens security beyond vulnerabilities, emphasizing validation and accountability.
> Search
30 results for “vulnerability”
Security
Cyber CrimeNemoClaw Flaw Opens Local AI Agents to Browser-Based Attacks
A single website visit can hijack NemoClaw's local Ollama model server via DNS rebinding, according to new research.
SecurityPatch windows collapse, network defense urged
Microsoft says the time to patch vulnerabilities is shrinking, urging network-level controls to bridge the gap.
SecurityNVIDIA AI Agent Flaw Opens Door to Model Poisoning
A NemoClaw weakness lets a webpage hijack local Ollama and inject persistent instructions into models.
SecurityAI tools shrink attack timelines for UAT-10147
Chinese-speaking group automates post-breach ops, slashing response windows for defenders.
SecurityAI Coding Piles Up Remediation Debt
Enterprises face growing open-source vulnerability backlogs as AI tools accelerate code output.
SecuritySpring Framework's 91 Flaws: A Wake-Up Call
Broadcom patches 91 Spring vulnerabilities, with one critical flaw exposing LDAP servers to attack.
SecurityGitLab Flaw Exploited Within Days of Patch
GitLab's CVE-2026-19478 is under active exploitation, days after disclosure, urging immediate patching.
SecurityJFrog Flaws Open Route to Package Cache Poisoning
Two flaws in JFrog Artifactory could let low-privileged users tamper with package metadata and compromise software supply chains.
SecurityCitrix NetScaler flaws: patch gap may invite attackers
Citrix warns of two NetScaler flaws, including an auth bypass, urging immediate patches.
SecurityLinux Foundation's Akrites Set to Operationalize in September
The Linux Foundation's Akrites initiative plans to launch its vulnerability disclosure and remediation platform in September.
Cyber CrimeFour Exploited Flaws Enter CISA KEV Catalog
CISA adds four actively exploited vulnerabilities affecting macOS, SharePoint, vCenter, and Windows IKE to its KEV catalog.
SecurityNASA ground control flaw opens door to unauthenticated commands
A critical AIT-GUI vulnerability could let attackers send commands to NASA spacecraft and instruments without authentication.
SecurityFeds get 3 days to patch Ray RCE flaw
CISA orders federal agencies to fix actively exploited Ray bug in 3 days, citing unique risk.
AI & MLAI's Offense Outpaces Its Defense
AI can find zero-days but still can't reliably write secure code, studies show.
SecurityCAF Bank Stalls on Online Restoration
Thousands of UK charities face payroll delays as CAF Bank remains offline a week after detecting a third-party security flaw.
SecurityGitLab Critical Flaw Allows Unauthenticated Project Deletion
A critical GitLab vulnerability could let unauthenticated attackers modify or delete public projects and user data.
SecurityModem Memory Flaw Opens Door to Kernel Takeover
UNISOC modem flaw lets attackers escalate code execution to kernel level via video calls.
AI & MLAI coding model's cyber skills raise alarms
Zhipu's GLM-5.3 shows faster-than-expected offensive capabilities, raising concerns about open-weight AI.
AI & MLGLM-5.3 Claims Superior Bug-Finding Edge
Zhipu's new AI model outperforms Western rivals on a cybersecurity benchmark, signaling China's rapid advance.
SecurityMac screen sharing flaw is being exploited to mine crypto
A high-severity macOS bug is under attack, with hackers placing Monero miners via port 5900.
SecurityOracle offers free database security tool
Oracle's new Database Security Central tool is free until February 2027, arriving amid rising database attacks.
SecurityCybersecurity backlogs signal an operations failure
A growing backlog of unresolved vulnerabilities is not a security problem but an organizational failure of ownership, capacity, and decision-making.
SecurityCommerce Flaw Hit in Hours
Adobe Commerce bug CVE-2026-71362 was exploited within hours of disclosure; Sansec reports active attacks.
SecuritySCCM Attack Chain Exposes Cost of Weak Trust
XM Cyber researchers chain four SCCM flaws into SYSTEM access for $58, with partial fixes leaving a path open.
SecurityUnauthenticated SAP Flaw Earns Maximum CVSS Score
SAP ships urgent patches for Commerce Cloud and other critical flaws rated up to 10.0.
SecurityVMware vCenter Flaw Exploited for Persistent Access
Attacks exploiting CVE-2026-59310 target hundreds of victims, deploying reverse_ssh for persistent access.
SecurityIvanti Endpoint Manager Patches Critical Flaws
Ivanti releases updates for Endpoint Manager and Neurons for MDM addressing remotely exploitable vulnerabilities.
SecurityIndustrial Patch Tuesday: Critical Gaps Closed in Siemens, Schneider, Phoenix
August 2026 ICS Patch Tuesday advisories from Siemens, Schneider Electric, Phoenix Contact address critical vulnerabilities, including a maximum-severity flaw in Siemens IoT devices.
SecurityCisco VPN flaw weaponized in active DoS attacks
A high-severity ASA and FTD vulnerability is being exploited to crash devices remotely; hot fixes are available.