Cybersecurity, AI, etc.
SecurityWeek and The Hacker News reported on CVE-2026-104286, a critical-severity path-traversal vulnerability said to allow unauthenticated attackers to write arbitrary files to an affected underlying system. Arbitrary file-write conditions can…
Attackers hijacked Microsoft’s official X account in an apparent cryptocurrency pump-and-dump scheme, according to BleepingComputer. The account has more than 13 million followers, making it a high-value channel for fraudulent…
Microsoft has published insights from its 2026 Digital Defense Report, arguing that defenders need to connect signals across endpoints, identities, cloud environments, applications, email, networks, and threat intelligence. The company’s…
Dell has issued fixes for two maximum-severity vulnerabilities in Container Storage Modules, the components used to connect Dell enterprise storage arrays to Kubernetes environments. According to BleepingComputer, the flaws could…
The China-linked Warlock ransomware group has reportedly targeted a water utility, telecom provider, regional government body, and university by exploiting SharePoint vulnerabilities for initial access. BleepingComputer reported that the activity…
GitLab has warned customers to patch a critical vulnerability in its AI Gateway service after reporting that the flaw could allow arbitrary command execution on vulnerable instances. The issue puts…
MetaMask says it is responding to an ongoing security incident affecting part of its infrastructure and has taken affected Ethereum validators out of service as a precaution. The company said…
OpenAI says it identified and disrupted a coordinated campaign designed to extract protected model reasoning at scale. The company attributed a core cluster of the activity to people associated with…
CISA has added CVE-2026-76504, a critical authentication-bypass vulnerability in Cisco Catalyst SD-WAN Manager, to its Known Exploited Vulnerabilities catalog after reports of active exploitation. Cisco says the issue can allow…
Fortinet has warned that CVE-2026-104286, a critical FortiMail vulnerability, is being exploited in the wild. The flaw can let an unauthenticated attacker write arbitrary files on an affected system through…