Cybersecurity, AI, etc.
Fortinet says attackers are exploiting a FortiMail vulnerability that permits unauthenticated arbitrary file writes through crafted HTTP requests. Organizations should follow Fortinet remediation guidance immediately, limit administrative exposure, and investigate…
Dell has addressed six flaws in Container Storage Modules that researchers say can enable authentication bypass, storage-credential access, and cluster-wide privilege escalation. Kubernetes operators using affected Dell CSM components should…
A China-nexus campaign attributed to UAT-11587 reportedly targeted Asian government and policy organizations with the Rust-based Antino backdoor, using Microsoft 365 services for command-and-control. Security teams should investigate anomalous Outlook…
GitLab has fixed CVE-2026-90970, described as a critical 9.9 flaw in AI Gateway that could allow logged-in Duo Agent Platform users to run commands on self-hosted gateways. Administrators should identify…
The Warlock ransomware operation reportedly exploited SharePoint flaws against at least four organizations, including two critical-infrastructure operators, and attempted to disable security tooling before ransomware deployment. Teams running affected SharePoint…
Threat researchers report that China-aligned TA419 targeted U.S. AI policy experts using reply-triggered adversary-in-the-middle phishing designed to capture Microsoft credentials and session cookies. Defenders should review identity-provider sign-in activity, enforce…
SecurityWeek and The Hacker News reported on CVE-2026-104286, a critical-severity path-traversal vulnerability said to allow unauthenticated attackers to write arbitrary files to an affected underlying system. Arbitrary file-write conditions can…
Attackers hijacked Microsoft’s official X account in an apparent cryptocurrency pump-and-dump scheme, according to BleepingComputer. The account has more than 13 million followers, making it a high-value channel for fraudulent…
Microsoft has published insights from its 2026 Digital Defense Report, arguing that defenders need to connect signals across endpoints, identities, cloud environments, applications, email, networks, and threat intelligence. The company’s…
Dell has issued fixes for two maximum-severity vulnerabilities in Container Storage Modules, the components used to connect Dell enterprise storage arrays to Kubernetes environments. According to BleepingComputer, the flaws could…