7 days agoViidure Dashcam Android ApplicationSeverity: ElevatedAction: Be awareCISA Cybersecurity Advisories
7 days agoOperTraitors: How Kubernetes Operators Betray Your Security PostureSeverity: InformationalPalo Alto Networks Unit 42
7 days agoOver 16,000 Supabase databases expose PII, passwords, auth tokensSeverity: InformationalBleepingComputer
8 days agoJadePuffer agentic AI attacks target Azure, destroy cloud resourcesSeverity: HighAction: Be awareBleepingComputer
8 days agoJadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud AttackSeverity: ElevatedAction: Be awareDark Reading
8 days ago80,000+ Organizations Had AI Logins Stolen: From Shadow AI to LLMjackingSeverity: ElevatedAction: Be awareBleepingComputer
9 days agoCISA Adds Two Known Exploited Vulnerabilities to CatalogSeverity: CriticalAction: Act nowExploitation: ExploitedCISA KEVCISA Known Exploited Vulnerabilities8 sources
11 days agoVU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilitiesSeverity: ElevatedAction: Be awareCERT/CC Vulnerability Notes
11 days agoStorm-3168: Agentic-driven cloud attacks using compromised service principalsSeverity: HighAction: Be awareMicrosoft Security Blog & MSRC
12 days agoVU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerabilitySeverity: HighAction: ReviewCERT/CC Vulnerability Notes
12 days agoSASE Converges Network & Security Into One Cloud SolutionSeverity: InformationalDark Reading
12 days agoVU#273940: Enterprise Access Management EAM does not rotate RSA keysSeverity: HighAction: ReviewCERT/CC Vulnerability Notes
13 days agoMicrosoft Disrupts EvilTokens Device Code Phishing ServiceSeverity: ElevatedAction: Be awareDark Reading
14 days agoSiemens Industrial Edge ManagementSeverity: CriticalAction: ReviewCISA Cybersecurity Advisories
15 days agoFrom Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed PoliciesSeverity: HighAction: Be awarePalo Alto Networks Unit 42
20 days agoCisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CVE-2026-76460) is being actively exploited, CISA warnsSeverity: CriticalAction: Act nowExploitation: ExploitedCISA KEVCISA Known Exploited Vulnerabilities