Microsoft has quietly deployed a cloud-side security fix for CVE-2026-69836, a critical, maximum-severity (CVSS score 10.0) remote code execution (RCE) vulnerability affecting Microsoft Entra ID (formerly Azure Active Directory). Stemming from the unsafe deserialization...
Zero-Trust Breach Risk: Microsoft Patches Actively Targeted Entra ID Elevation of Privilege Flaw
Microsoft has released an urgent out-of-band security update addressing an actively exploited elevation of privilege vulnerability in Microsoft Entra ID (formerly Azu...
Critical Energy Infrastructure Attack: Cyber Intrusion Shuts Down UK Power Generation Facility for Four Days
A targeted cyberattack disabled a regional power generation facility in the United Kingdom for four consecutive days, according to detailed forensic repor...
Authentication Bypass: Critical Keycloak Flaw CVE-2026-18963 Allows Zero-Interaction Account Takeovers
Red Hat and the Keycloak open-source identity and access management (IAM) project have released urgent security advisories addressing a critical vulnerability i...
Silent Patch Hazard: Critical MiniOrange SAML SSO Flaws (CVE-2026-61979 & CVE-2026-15981) Exploited in Wild
Threat actors have launched opportunistic, mass-exploitation campaigns targeting two critical authentication bypass vulnerabilities—tracked as CVE-2026-619...
Biotechnology global leader Amgen Inc. (NASDAQ: AMGN) has formally filed a Form 8-K disclosure with the U.S. Securities and Exchange Commission (SEC) under Item 1.05, confirming a material cybersecurity incident involving the exfiltration of sensitive patient Protected ...
A critical authentication bypass vulnerability (CVE-2026-18963, CVSS v3.1 score 9.1) has been uncovered in Keycloak, the widely deployed open-source identity and access management (IAM) platform maintained by Red Hat and the Cloud Native Computing Foundation (CNCF) comm...
Cyber Espionage: Operation QUICSILVER Uses VHD Lures and QUIC Protocol to Deploy QUICAgent Backdoor
Cybersecurity researchers at Seqrite and Broadcom (Carbon Black) have exposed a sophisticated cyber espionage campaign tracked as Operation QUICSILVER, attributed ...
Unpatched Zero-Day: 'ShieldBreak' Flaw in Microsoft Defender Grants Local SYSTEM Privileges (CVE-2026-69414)
A critical local privilege escalation (LPE) zero-day vulnerability, dubbed ShieldBreak and tracked as CVE-2026-69414, has been uncovered in the Microsoft ...
Supply Chain & Extortion Threat: Black Kite Report Reveals Mid-Market Firms Account for 73% of Global Ransomware Attacks
A comprehensive cybersecurity research report published on August 24, 2026, by third-party risk intelligence leader Black Kite reveals that mi...
A critical local privilege escalation (LPE) zero-day vulnerability in the Microsoft Malware Protection Engine (mpengine.dll), dubbed ShieldBreak and tracked as CVE-2026-69414, has emerged into the wild with public proof-of-concept (PoC) exploit code actively circulating...
Autonomous AI Threat Discovery: Z.ai's GLM-5.3 Uncovers 2,436 Real-World Vulnerabilities, Triggering Dual-Use Risk Debate
A major breakthrough in AI-powered cybersecurity research arrived on August 23–24, 2026, as AI lab Z.ai published findings from its frontier ...