Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Cisco has disclosed a high-severity server-side request forgery (SSRF) vulnerability in Unified Communications Manager (Unified CM) and Unified CM Session Management Edition that can be escalated to root-level privilege. Tracked…
SafeBreach Labs has disclosed a new class of indirect prompt injection attack against Google Gemini voice assistant on Android, demonstrating how malicious instructions hidden in messaging notifications can take control…
Security researcher Ammar Askar disclosed a critical vulnerability in Visual Studio Code that allowed attackers to steal GitHub access tokens with a single click. The flaw primarily targeted github.dev, the…
A devastating new denial-of-service vulnerability dubbed the “HTTP/2 Bomb” has been publicly disclosed, and it is remarkably effective. Tracked as CVE-2026-49975, the exploit can crash web servers running default HTTP/2…
Three Microsoft Windows Defender zero-day vulnerabilities disclosed by a security researcher operating under the alias “Nightmare Eclipse” are now under active exploitation, with CISA adding all three to its Known…
At its Security & Risk Management Summit on June 2, 2026, Gartner identified four cybersecurity threats requiring urgent attention from security leaders: deepfakes, AI application compromise, prompt injection, and software…
Google released its June 2026 Android security update on Monday, patching 124 vulnerabilities across the operating system. The most critical is CVE-2025-48595, a high-severity privilege escalation flaw in the Android…
The Cybersecurity and Infrastructure Security Agency added CVE-2024-21182, a critical vulnerability in Oracle WebLogic Server, to its Known Exploited Vulnerabilities catalog on June 1, 2026, confirming active exploitation in the…
Sysdig’s Threat Research Team has published a detailed report documenting what they describe as the first confirmed live cyberattack in which an autonomous Large Language Model agent executed an entire…
Attackers discovered a critical vulnerability in Meta’s AI-powered support chatbot that allowed them to bypass two-factor authentication and seize control of Instagram accounts — including high-profile targets like the inactive…