13 days agoVU#273940: Enterprise Access Management EAM does not rotate RSA keysSeverity: HighAction: ReviewCERT/CC Vulnerability Notes
13 days agoVU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlersSeverity: ElevatedAction: Be awareCERT/CC Vulnerability Notes
13 days agoMacfinger ClickFix campaign, (Tue, Sep 22nd)Severity: InformationalSANS Internet Storm Center
13 days agoReimagining the SOC for the agentic era in Microsoft DefenderSeverity: InformationalMicrosoft Security Blog & MSRC
13 days agoAttackers Manipulate AI Chatbots in Mass Disinformation, Phishing CampaignSeverity: ElevatedAction: Be awareDark Reading
13 days agoConsiderations for Critical Infrastructure Operators Working With Third-Party ICS IntegratorsSeverity: ElevatedAction: Be awareCISA Cybersecurity Advisories
13 days agoResearch on Models Engaging in Genie-Like BehaviorSeverity: InformationalSchneier on Security
14 days agoRelays Are Masking Chinese Access to Frontier AI Models in the USSeverity: InformationalDark Reading
14 days agoMicrosoft Disrupts EvilTokens Device Code Phishing ServiceSeverity: ElevatedAction: Be awareDark Reading
14 days agoDeception by Design: CISA's Guide to Tricking CybercriminalsSeverity: ElevatedAction: Be awareDark Reading
14 days agoExtended Stable Update for DesktopSeverity: ElevatedAction: Be awareGoogle Chrome Releases2 sources
14 days agoStable Channel Update for DesktopSeverity: CriticalAction: PatchGoogle Chrome Releases2 sources
14 days agoAmid Ongoing Rogue Incidents, Debate Over AI Safety Gets RealSeverity: InformationalDark Reading
14 days agoUnmasking EvilTokens: Getting to the root of device code phishingSeverity: ElevatedAction: Be awareMicrosoft Security Blog & MSRC
14 days agoUnmasking EvilTokens: Getting to the root of device code phishingSeverity: ElevatedAction: Be awareMicrosoft Security Blog & MSRC
14 days agoMore Than a Third of Industrial Orgs See Cybersecurity Risk as a Top Obstacle to Growth, Study FindsSeverity: InformationalDark Reading
14 days agoCheck Point Multiple Products Improper Certificate Validation Vulnerability (CVE-2026-85102) is being actively exploited, CISA warnsSeverity: CriticalAction: Act nowExploitation: ExploitedCISA KEVCISA Known Exploited Vulnerabilities
14 days agoF5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (CVE-2026-94127) is being actively exploited, CISA warnsSeverity: CriticalAction: Act nowExploitation: ExploitedCISA KEVCISA Known Exploited Vulnerabilities
14 days agoArista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVE-2026-93952) is being actively exploited, CISA warnsSeverity: CriticalAction: Act nowExploitation: ExploitedCISA KEVCISA Known Exploited Vulnerabilities
14 days agoSiemens Industrial Edge ManagementSeverity: CriticalAction: ReviewCISA Cybersecurity Advisories