…can an attacker move through the network? They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold. This guide covers the 6…
…If successfully exploited, this vulnerability may result in remote code execution." Oracle has confirmed that the zero-day vulnerability affects PeopleSoft Enterprise PeopleTools, versions 8.61 and 8.62, and has released…
…Cisco released security updates for the CVE-2026-20230 flaw on June 3, warning that exploitation could give attackers root privileges on the device. "A vulnerability in Cisco Unified Communications Manager (Unified…
…Microsoft notes that AutoJack's impact was limited because the issue was addressed during development. "This issue was identified and remediated before any PyPI release, so the affected code never shipped in…
Windows BitLocker zero-day gives access to protected drives, PoC released By Bill Toulas May 13, 2026 12:37 PM A cybersecurity researcher has published proof-of-concept (PoC) exploits for two…
…The update was outside the plugin's release pipeline and included malicious code. Apart from not following the official date style scheme, the malicious plugin lacked a git tag and a GitHub…
…can an attacker move through the network? They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold. This guide covers the 6…
…When the malicious npm package was released, Grafana’s CI/CD workflow consumed it, and the info-stealer module executed in its GitHub environment, exfiltrating GitHub workflow tokens to the attackers. The…
…Based on our investigation to date, we have found no evidence that our source code release or distribution process was affected, or that our source code has been exploited." At the time…
…Researchers at cybersecurity company Group-IB analyzed the new release of the mobile malware and say that it significantly expands its capabilities compared to the previous variant documented in 2025. At the…