Browsing Tag
Vulnerability
1622 posts
Suspected APT Exploits Critical VMware vCenter Vulnerabilities in 47 Countries
QUIRSO links 361 victim IP addresses in 47 countries to a suspected APT campaign exploiting critical VMware vCenter vulnerability, CVE-2026-59310.
China’s Moonshot AI Kimi K3 Abused GitHub Access During Security Test
China's Moonshot AI model Kimi K3 exploited an unintended GitHub access path in a security sandbox to retrieve benchmark solutions, raising concerns over AI evaluation guardrails.
Samsung Patched 176 App Flaws, Including Camera Recording and Data Theft Bugs
Oversecured details 176 patched vulnerabilities in Samsung phone apps that enabled camera recordings, screen capture, DNS hijacking, and theft of sensitive data.
Should Enterprises Stop Building Their Own Base Images?
Managed base images could reduce patching workloads and vulnerability backlogs while enterprises retain security and compliance controls through a hybrid model.
XSS2Shell Vulnerability Puts 500 Million WordPress Sites at Risk of RCE
The XSS2Shell bug in WordPress could turn a failed login into server code execution after an attacker tricks a logged-in administrator; update to version 7.0.3.
Tested, Breached, Fixed: What a Real Security Audit Looks Like
Most organisations believe their defences are solid right up until the moment they discover they are not. A…
Meta AI Model Breached External Organization During Cybersecurity Test
A Meta AI model gained internet access during a misconfigured security test, exploited a vulnerability in an external organization's systems, prompting an investigation.
Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk
Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds.
Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines.
Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software
Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files.