North Korean Hackers Compromise Popular 'arrayref' Rust Crate (245M+ Downloads) in Build-Time Supply Chain Attack
State-sponsored North Korean cyber actors have executed a sophisticated software supply chain attack targeting the Rust programming ecosystem (Securi...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency warning by adding CVE-2026-33824 to its Known Exploited Vulnerabilities (KEV) catalog following confirmed in-the-wild exploitation. Tracked with a critical CVSS v3.1 base score of 9...
Trend Micro's enterprise threat intelligence division (TrendAI) has discovered a coordinated supply-chain campaign involving 14 malicious npm packages designed to silently deploy an advanced Linux implant known as RedShell, integrated with the RedC2 4.0 command-and-cont...
A critical supply-chain cybersecurity crisis is unfolding across the Managed Service Provider (MSP) ecosystem as threat actors actively exploit CVE-2026-18577, a high-severity authentication bypass vulnerability in the widely deployed N-able N-central Remote Monitoring ...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive adding two actively exploited security vulnerabilities in TrueConf Server—tracked as CVE-2026-72529 (CVSS score 9.3) and CVE-2026-72530—to its Known Exploited Vulnerabilit...
Active Exploitation Alert: Critical GitLab GraphQL Directive Flaw (CVE-2026-19478) Exploited in the Wild
A critical remote code injection vulnerability impacting GitLab Community Edition (CE) and Enterprise Edition (EE) has come under active, automated exploitati...
Active Exploitation Surge: Hackers Weaponize Critical GitLab GraphQL Directive Code Injection Flaw (CVE-2026-19478)
Cybersecurity threat researchers from watchTowr Labs and global incident response teams confirmed on August 21–22, 2026, that threat actors are act...
Microsoft has officially disclosed a maximum-severity Remote Code Execution (RCE) vulnerability in Microsoft Entra ID (formerly Azure Active Directory), tracked as CVE-2026-69836 with a maximum CVSS v3.1 base score of 10.0. The flaw, discovered internally by Microsoft P...
Critical Cloud Flaw: Microsoft Patches Max-Severity Entra ID Deserialization Vulnerability (CVE-2026-69836)
In an extraordinary out-of-band security disclosure, Microsoft has patched a maximum-severity remote code execution vulnerability impacting Microsoft Entra...
Critical Citrix NetScaler Authentication Bypass (CVE-2026-19490, CVSS 9.3) Exposes Enterprise Gateways
Cloud software provider Citrix has issued an urgent security advisory warning of a critical authentication bypass vulnerability in NetScaler ADC and NetScaler G...
Critical Identity Infrastructure Alert: Microsoft Patches Severe Entra ID Remote Code Execution Flaw (CVSS 10.0) in Azure Control Plane
Microsoft deployed emergency out-of-band cloud security updates on August 21–22, 2026, addressing a maximum-severity vulnerabil...
Critical isolated-vm Flaw (GHSA-864f-rcv7-6rh4) Enables V8 Sandbox Escape and Host RCE in Node.js AI Runtimes
A critical sandbox escape vulnerability has been disclosed and patched in isolated-vm (The Hacker News, SecurityWeek), a premier open-source Node.js libr...