Webinar: How to Automate Exposure Validation to Match the Speed of AI Attacks
AI-driven attacks uncovered in February 2026 automate kill chain and seize Domain Admin credentials in minutes, forcing faster defenses.
GitHub fixes RCE flaw that gave access to millions of private repos
In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed attackers to access millions of private repositories.
What to Look for in an Exposure Management Platform (And What Most of Them Get Wrong)
Integrated exposure platforms validate exploitability, correlate paths, and reduce priorities to 2%, improving enterprise risk reduction.
.jpg?width=350&height=&ar=16:9&mode=crop&dpr=2)
Catastrophic AI Risk Controls | CSA
Learn how the STAR for AI Catastrophic Risk Annex turns extreme AI risks into testable controls, enabling measurable, auditable AI safety.
Faille critique GitHub : comment un simple git push permettait d'exécuter du code - Numerama
Des chercheurs en sécurité de Wiz ont découvert une vulnérabilité critique dans l'infrastructure interne de GitHub, permettant à n'importe quel utilisateur authentifié d'exécuter du code arbitraire sur les serveurs de la plateforme, le tout avec une seule commande git. Un git push. C'est, à peu près, tout ce qu'il
AI-powered honeypots: Turning the tables on malicious AI agents
Just as AI brings time-saving advantages to our lives, it brings similar advantages to threat actors. We can take the advantage back. This blog shows how generative AI can be used to rapidly deploy adaptive honeypot systems.
HAX CMS 24.x - Stored Cross-Site Scripting (XSS)
HAX CMS 24.x - Stored Cross-Site Scripting (XSS). CVE-2026-22704 . webapps exploit for Multiple platform
GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation
GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation. CVE-2026-24061 . local exploit for Linux platform
Craft CMS 5.6.16 - RCE
Craft CMS 5.6.16 - RCE. CVE-2025-32432 . webapps exploit for Multiple platform
Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately
cPanel patches authentication flaw across supported versions, prompting Namecheap port blocks and temporary access limits.
Scam-checking just got a lot easier: Malwarebytes is now in Claude | Malwarebytes
We're in Claude! Now everyone can use our threat intel to check suspicious links, phone numbers, or email addresses.
Identity as the OS for AI Security | CSA
Explores identity and authorization as the operating system for autonomous AI security, highlighting failures, patterns, and the case for a unified IAM layer.
CISA orders feds to patch Windows flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks.
phpMyFAQ 4.0.16 - Improper Authorization
phpMyFAQ 4.0.16 - Improper Authorization. CVE-2026-24421 . webapps exploit for PHP platform
GeographicLib v2.5.1 - stack buffer overflow
GeographicLib v2.5.1 - stack buffer overflow. CVE-2025-60751 . webapps exploit for Multiple platform
Claude Mythos Has Found 271 Zero-Days in Firefox - Schneier on Security
That’s a lot. No, it’s an extraordinary number: Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser. We wrote previously about our collaboration with Anthropic to scan Firefox with Opus 4.6, which led to fixes for 22 security-sensitive bugs in Firefox 148. As part of our continued collaboration with Anthropic, we had the opportunity to apply an early version of Claude Mythos Preview to Firefox. This week’s release of Firefox 150 includes fixes for 271 vulnerabilities identified during this initial evaluation...
Qu'est-ce que ClawSwarm, la cyberattaque visant les agents IA en 2026 ? - Numerama
30 outils piégés, près de 10 000 téléchargements, et des agents IA qui travaillent en secret pour une économie de tokens crypto. Le 28 avril 2026, les chercheurs en cybersécurité de Manifold ont mis en lumière la campagne ClawSwarm, qui exploite le manque de supervision des déploiements d’agents autonomes. Pour
CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV
CISA added two actively exploited CVEs to KEV after confirmed attacks, mandating FCEB patching by May 12, 2026.
ShinyHunters exploit Anodot incident to target Vimeo
The video platform Vimeo confirmed a security breach via Anodot that exposed metadata, video titles, and some user emails.
U.S. CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog.
Microsoft says backend change broke Teams Free chat and calls
Microsoft is working to resolve a known issue that prevents some Microsoft Teams Free users from chatting and calling others.
OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)
OpenWrt 23.05 - Authenticated Remote Code Execution (RCE).. local exploit for Multiple platform
OpenKM 6.3.12 - Multiple
OpenKM 6.3.12 - Multiple.. webapps exploit for Multiple platform
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE). CVE-2026-22241 . webapps exploit for Multiple platform
JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution
JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution.. webapps exploit for Multiple platform
FacturaScripts 2025.43 - XSS
FacturaScripts 2025.43 - XSS. CVE-2025-69210 . webapps exploit for Multiple platform
Xibo CMS 4.3.0 - RCE via SSTI
Xibo CMS 4.3.0 - RCE via SSTI. CVE-2025-62639 . webapps exploit for Multiple platform
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
CVE-2026-42208 exploited within 36 hours of disclosure, exposing LiteLLM credentials, risking cloud account compromise.
Fedora - Local Privilege Escalation
Fedora - Local Privilege Escalation. CVE-2025-12744 . local exploit for Linux platform
LangChain Core 1.2.4 - SSTI/RCE
LangChain Core 1.2.4 - SSTI/RCE. CVE-2025-68664 . webapps exploit for Multiple platform