Cisco warns of new SD-WAN zero-day exploited in attacks
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV
Web & App Security
OWASP, APIs, authentication, supply chain and DevSecOps.
All Web & App Security stories
Chrome Beta for Desktop Update
Severity: ElevatedAction: Be aware
Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Severity: HighAction: PatchExploitation: ExploitedCISA KEV
Chrome, Firefox Updates Patch Over 100 Vulnerabilities
Severity: ElevatedAction: Patch
High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL
Severity: ElevatedAction: Patch
Chrome for Android Update
Severity: ElevatedAction: Patch
Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks
Severity: Informational
Lantronix G520 Series Cellular Gateway
Severity: ElevatedAction: Be aware
Toptech TMS7 and TopHAT
Severity: ElevatedAction: Be aware
Anjvision YSSD-RTMP-H5
Severity: ElevatedAction: Be aware
Four Cyber Threats Harboring Big Plans for the Future
Severity: Informational
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
Severity: ElevatedAction: Be aware
VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Severity: ElevatedAction: Be aware
Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
Severity: ElevatedAction: Be aware
Chrome Dev for Android Update
Severity: ElevatedAction: Be aware
VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
Severity: ElevatedAction: Be aware
Chrome Dev for Desktop Update
Severity: ElevatedAction: Be aware
Stable Channel Update for ChromeOS / ChromeOS Flex
Severity: ElevatedAction: Be aware
VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
Severity: ElevatedAction: Be aware
WSO2 Multiple Products Path Traversal Vulnerability (CVE-2026-5430) is being actively exploited, CISA warns
Severity: CriticalAction: Act nowExploitation: ExploitedCISA KEV