
Cyber Attacks
View all
OpenAI Chrome Extension Gets Tab Read and Action Access, Sparking Enterprise Security Concerns
OpenAI’s updated extension can now read open tabs and execute browser actions, raising access control concerns for enterprise security teams.
Cloud Security
View allVulnerabilities
View all
Laravel TokenGuard Critical Bug Lets Attackers Forge Identities on API Routes
A critical bug in Laravel’s TokenGuard allows attackers to bypass authentication and assume user identities on API routes.

Cloudflare Adopts OpenAI Daybreak for Vulnerability Discovery and Remediation
Cloudflare integrates OpenAI’s Daybreak tool to identify security flaws and propose code fixes, while using Codex to accelerate development and improve overall software quality.

Anthropic’s Claude Identifies 493 Security Flaws in Open-Source Codebases
An AI model flagged hundreds of vulnerabilities across twenty-five projects, including one issue that remained hidden for two decades.

Acrobat for Edge OOB Write CVE-2026-75747 Lets Attackers Run Code on Versions Up to 154.0.4258.37
A high-severity flaw in Acrobat for Edge allows arbitrary code execution if users open malicious files, requiring interaction to exploit.
Data Breaches
View all
Data Classification Mistakes That Expose Your Infrastructure

Credit Freezes: 6 Common Misunderstandings That Leave You Exposed

Email Account Compromise Prevention Checklist for Secure Operations

Password reuse is a security risk: how to break the chain
Latest news
Vulnerabilities
Cisco UIC and CCX Exposed to Blind SQL Injection via Web Interface
Authenticated users can exploit input validation flaws in Cisco Unified Intelligence Center to read internal database contents, according to Cisco PSIRT.
Vulnerabilities
certifi and uv Trust Compromised emSign Root, Enabling Forged Certs for Python Clients
Compromised keys in the emSign root allow attackers to forge certificates for Python clients using certifi and uv before specific patch versions are applied.
Vulnerabilities
PHP Critical RCE Bugs Leaked Online; Patches Due Oct 21, 2026 Amid Mass Exploit Warnings
Critical unauthenticated RCE bugs in PHP versions 5 and later have been leaked online, with patches scheduled for release on 21 October 2026.
Vulnerabilities
Totolink X2000R Stack Overflow in boa formUploadFile Permits Authenticated Arbitrary Code Execution
An authenticated stack overflow in the boa formUploadFile feature of specific X2000R firmware permits arbitrary code execution on the device.
Vulnerabilities
Totolink X2000R Stack Overflow in VPN Filter Allows Remote Code Execution
Authenticated attackers can exploit stack-based buffer overflows in the X2000R router's boa formFilter to achieve arbitrary code execution.
Vulnerabilities
IBM DataStage Redis flaw lets anonymous users inject data and break encryption boundaries
A critical vulnerability in IBM DataStage allows anonymous users to write to shared Redis stores, bypassing encryption boundaries and poisoning tenant data.
Vulnerabilities
IBM Planning Analytics Buffer Overflow Risks Arbitrary Code Execution
A stack-based buffer overflow in IBM Planning Analytics 2.0 and 2.1 allows attackers to execute arbitrary code on affected systems.
Vulnerabilities
Pillow Heap Out-of-Bounds Read in TIFF Decoding Exposes Memory
A vulnerability in Pillow allows attackers to extract heap memory by uploading malformed TIFF images, with no authentication required.











