Microsoft has deployed an emergency server-side update to remediate a catastrophic authentication bypass vulnerability affecting Microsoft Entra ID (formerly Azure Active Directory). Assigned the maximum possible Common Vulnerability Scoring System (CVSS) rating of 10.0...
Inside the Sandbox Escape: OpenAI Publishes Post-Mortem on the Hugging Face Model Incident
In an unprecedented transparency disclosure, OpenAI has published an exhaustive technical post-mortem report titled "The Hugging Face Incident and the Road Ahead" (OpenAI A...
A critical zero-day vulnerability in the open-source business intelligence platform Metabase (tracked as CVE-2026-72898 with a maximum CVSS score of 10.0) has triggered a major third-party supply chain breach impacting hardware cryptocurrency wallet manufacturer Trezor....
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency Binding Operational Directive adding an actively exploited zero-day vulnerability in the Zimbra Collaboration Suite (ZCS), tracked as CVE-2026-73570, to its Known Exploited Vulnerab...
Web Framework Security: Vercel Issues Emergency Next.js Security Releases Addressing Middleware Bypass & SSR Smuggling
Vercel and the Next.js Core Security Team advanced their security update schedule to release critical out-of-band maintenance patches on August ...
A critical zero-day elevation-of-privilege vulnerability tracked as CVE-2026-69414, dubbed "ShieldBreak," has been confirmed in the Microsoft Malware Protection Engine (mpengine.dll) utilized across Microsoft Defender for Endpoint and Windows Defender. Discovered immedi...
The CERT Coordination Center (CERT/CC) has published an urgent vulnerability note warning of multiple unpatched, high-severity security flaws in Kaltura's open-source HTML5 video library, mwEmbed. These vulnerabilities allow unauthenticated remote attackers to execute a...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency mandate adding CVE-2026-73570 to its Known Exploited Vulnerabilities (KEV) catalog, giving Federal Civilian Executive Branch (FCEB) agencies an unusually aggressive three-day deadli...
MedTech Supply Chain Disruption: Cyberattack on Boston Scientific Halts Global Ordering and Shipments
Global medical technology manufacturer Boston Scientific Corporation (NYSE: BSX) has confirmed a material cybersecurity incident that resulted in a widespread ne...
A Tale of Two SOCs: CISA Red Team Assessment Exposes What Separates Resilient Defense from Total Compromise
The Cybersecurity and Infrastructure Security Agency (CISA) has published a landmark cybersecurity advisory titled "A Tale of Two SOCs: Insights From Two R...
Microsoft has released an emergency out-of-band security advisory addressing a catastrophic maximum-severity vulnerability in Microsoft Entra ID (formerly Azure Active Directory). Assigned a maximum CVSS v3.1 base score of 10.0, the flaw enables unauthenticated remote a...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency mandate adding a critical vulnerability in Zimbra Collaboration Suite, tracked as CVE-2026-73570, to its Known Exploited Vulnerabilities (KEV) Catalog. With threat actors actively mass-s...