Summary: After weeks of active exploitation, Cisco has released a patch for a critical zero-day vulnerability (CVE-2025-20393, CVSS 10.0) in […]
Cisco Patches “Perfect 10” Zero-Day in Secure Email Gateways (CVE-2025-20393) Read More »
Summary: CISA has added CVE-2026-20805—an information disclosure vulnerability in the Windows Desktop Window Manager (DWM)—to its Known Exploited Vulnerabilities (KEV)
Summary: A new class of attack named “WhisperPair” targets the Google Fast Pair implementation in millions of Bluetooth audio accessories.
WhisperPair Attack: Millions of Bluetooth Audio Accessories Vulnerable to Hijacking Read More »
Summary: Security researchers have uncovered two critical privilege escalation bugs in Google Vertex AI. The vulnerabilities allow low-privileged users to
Google Vertex AI Privilege Escalation: “Service Agent” Hijacking Discovered Read More »
Summary: Researchers have disclosed “StackWarp,” a critical architectural vulnerability in AMD processors supporting SEV-SNP (Secure Encrypted Virtualization). The attack allows
StackWarp Attack: Remote Code Execution Discovered in AMD Confidential VMs Read More »
Summary: Following this week’s workshop, NIST has officially released the “Initial Preliminary Draft” of the Cybersecurity Framework Profile for Artificial
NIST Releases Draft “Cyber AI Profile” for Public Comment Read More »
Summary: A new report on the Middle East cybersecurity landscape has identified “Insider Threats” as the top risk for 2026,
GCC Cyber Outlook: “Insider Threat” Named #1 Risk for 2026 Read More »
Summary: A highly sophisticated campaign is distributing the new “DarkGate 2.0” loader via Microsoft Teams. Attackers are using compromised external
“DarkGate” Malware 2.0 Spreading via Microsoft Teams External Chats Read More »
Summary: Security researchers have disclosed a new, critical authentication bypass vulnerability (CVE-2026-1920) affecting the latest versions of Ivanti Connect Secure.
Critical Zero-Day: Ivanti Connect Secure Authentication Bypass (CVE-2026-1920) Read More »
Summary: CISA has added a Path Traversal vulnerability in the Gogs Git service to its Known Exploited Vulnerabilities (KEV) catalog.
CISA KEV Alert: Active Exploitation of Gogs Path Traversal (CVE-2025-8110) Read More »
