Cybersecurity, AI, etc.
Cisco’s Catalyst SD-WAN Manager is affected by CVE-2026-76504, a critical API authentication-bypass vulnerability that Cisco says has been exploited in the wild. Rapid7 reports that the flaw has a CVSS…
Citrix has warned that exploitation of CVE-2026-88771 and CVE-2026-88772 has been observed on unmitigated NetScaler deployments. The vendor’s security bulletin covers multiple NetScaler ADC and Gateway vulnerabilities, with the two…
Microsoft published new tracking guidance for CVE-2026-73570, an unauthenticated command-injection vulnerability affecting internet-facing mail servers. The advisory underscores a familiar but high-impact operational risk: exposed infrastructure can move quickly from…
Microsoft says the Russian state threat actor it tracks as Star Blizzard has expanded its operational playbook with large-scale phishing, compromised-website accounts, and a malware-delivery technique it calls RedFlick. Microsoft…
Anthropic has published a new assessment of Zhipu AI’s GLM-5.3, arguing that the open-weight model has crossed an important threshold in cyber capability. The report says GLM-5.3 can autonomously develop…
OpenAI has proposed safety cases for frontier AI training: structured evidence, incident-derived regression tests, postmortems, and disclosure after investigations conclude. Why it matters A safety case connects risk claims to…
OpenAI says GPT-6.1 Sol shows lower failure rates than GPT-6 Sol in evaluations of tool transparency, explicit restrictions, and avoidance of unauthorized agentic outcomes. Security implications Vendor evaluations are evidence,…
Zscaler’s ThreatLabz 2026 Ransomware Report says ransomware is rising and describes AI-assisted tactics, data theft, and targeting of privileged employees. How to use the finding The claims are vendor-report findings,…
CVE-2026-84782 is a reported OpenSSL DTLS handshake retransmission issue that may cause plaintext heap-memory disclosure or denial of service. Defender checklist Inventory DTLS-dependent services, including embedded products. Confirm OpenSSL versions…
Apple has released iOS and macOS updates that address CVE-2026-86950, reported by Meta’s product security team and described in security reporting as a zero-day. What to do now Deploy current…