News
Upcoming Events
AI Vulnerability Management: A Proactive Approach for Network Operations
2026-11-05 13:00 | 2026-11-05 14:00
Frontier AI models, including Claude Mythos, can identify and exploit software vulnerabilities at unprecedented speed. Preemptive discovery gives defenders a new opportunity to find and fix weaknesses before attackers can exploit them.
...Read more
All times are Eastern Time (GMT/UTC -4h)
Compromised TLS Certificates
The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers study...Read more
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
The flaw, CVE-2026-112900, is in the way Pillow handles EPS images...Read more
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
zero-day SQL injection flaw in VCO, tracked as CVE-2026-114625 and rated 9.9 on the CVSS scale....Read more
Max-severity GitLab bug allows remote code execution over 12 years of releases
The integer overflow bug, tracked as CVE-2026-110264,...Read more
PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches
The new issue, assigned CVE-2026-115560, affects only web apps configured in an unusual way,...Read more
PHP2Shell puts dozens of UK government services out of service
Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
Carly Page...Read more
BIND 9 Flaw CVE-2026-94300 Opens DNS Servers to RCE
The GSS-TSIG memory corruption bug affects every BIND release since 9.11.0, has no workaround, and won’t be fixed...Read more
Claude Security can now spot vulnerabilities that reappear in code
Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams...Read more
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra, an Indian CA, will withdraw from its global SSL/TLS certificate business, its board decided on Thursday...Read more
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
full working exploit published for a pre-authentication remote code execution flaw in AnyDesk Linux...Read more
Critical Vulnerabilities in PHP Require Immediate Patching
CISA strongly urges orgs to immediately patch the recently disclosed critical php2shell vulnerabilities in PHP...Read more
Citrix gives NetScaler admins another critical reason to patch
No word on exploitation status, but a 9.5 severity score suggests time is of the essence. CVE-2026-107406...Read more
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls...Read more
The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations
Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and complex digital...Read more