CISA KEV Emergency Alert: Active Exploitation Confirmed for VMware vCenter, Windows IKE, and Defender ShieldBreak Zero-Day
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent expansion to its Known Exploited Vulnerabilities (KEV) Cata...
Cisco Patches Multiple Maximum-Severity CVSS 10.0 Flaws in Crosswork and Secure Workload Platforms
Networking and security giant Cisco has published a major batch of emergency security advisories addressing nine critical vulnerabilities across its enterprise infr...
Microsoft has officially disclosed and mitigated a critical remote code execution (RCE) vulnerability in its core cloud-based identity and access management service, Microsoft Entra ID (formerly Azure Active Directory). Assigned the maximum severity score of CVSS 10.0 (...
Microsoft has addressed a maximum-severity remote code execution (RCE) vulnerability (CVE-2026-69836, CVSS v3.1 score 10.0 / Critical) within Microsoft Entra ID (formerly Azure Active Directory). As the foundational identity service underpinning Microsoft 365, Azure Clo...
Critical Infrastructure Policy: Japan NISC Outlines Enhanced Unified Standards for Critical Infrastructure Cybersecurity
The National center of Incident readiness and Strategy for Cybersecurity (NISC) of Japan finalized enhanced national cybersecurity mandates on...
Authentication Bypass: Critical Keycloak Flaw CVE-2026-18963 Enables Unauthenticated Account Takeovers
Red Hat and the open-source Keycloak project have issued an urgent security advisory for a critical authentication bypass vulnerability, tracked as CVE-2026-189...
Critical Keycloak Password Reset Flaw Enables Unauthenticated Account Takeover Across Enterprise Portals
Red Hat and the open-source Keycloak project have released emergency security updates addressing a critical authentication flaw in Keycloak Identity and Acces...
Spacecraft Command Injection: Critical NASA/JPL AIT-GUI Flaw (CVSS 9.4) Enables Unauthenticated Command Execution
Cybersecurity researchers at Cycode have disclosed a critical security vulnerability chain in AIT-GUI (The Hacker News, Security Affairs), the browse...
Enterprise Mail Server Zero-Day: CISA Adds Actively Exploited Zimbra Collaboration Suite SNMP Command Injection Flaw to KEV (CVE-2026-73570)
The Cybersecurity and Infrastructure Security Agency (CISA) added an actively exploited operating system command injection...
Throughout August 2026, the Russia-linked cybercriminal syndicate Cl0p (also tracked as FIN11 and Lace Tempest) escalated its latest global mass-extortion campaign, naming more than 40 high-profile multinational corporations on its dark web leak site. The campaign cente...
International Cybersecurity Compliance: Vietnam Enacts Decree No. 327/2026/ND-CP Mandating 3-Hour Emergency Data Handover
The Government of Vietnam formally enacted and commenced active enforcement of Decree No. 327/2026/ND-CP on August 22–23, 2026, establishing ...
Historic Energy Sector Sabotage: Iran-Linked Cyberattack Disables UK Power Plant for Four Days
In a historic escalation of critical infrastructure cyber warfare, an energy generation facility in the United Kingdom was disabled and forced offline for four consecut...