
Cyber Attacks
View all
OpenAI Chrome Extension Gets Tab Read and Action Access, Sparking Enterprise Security Concerns
OpenAI’s updated extension can now read open tabs and execute browser actions, raising access control concerns for enterprise security teams.
Cloud Security
View allVulnerabilities
View all
YouDataSum CPAS V4 Unauthenticated Arbitrary File Read CVSS 8.7
Attackers can read arbitrary system files in YouDataSum CPAS V4 without authentication by manipulating a specific download parameter.

Cisco Patches Critical RCE and Auth Bypass Flaws in Expressway, UC, and Snort 3
Cisco has released updates for 34 vulnerabilities, including critical remote code execution and authentication bypass issues across multiple infrastructure products.

PHP2Shell RCE Flaws: Workaround Insufficient Before October Patch
Experts warn that disabling session upload progress does not stop PHP2Shell exploitation until the official vendor patch is applied.

Counterfeit AI Installers Harvest Credentials and Deploy Malware in US Corporate Networks
Attackers distribute counterfeit AI tools disguised as legitimate software to harvest credentials and deploy malware within corporate networks.
Data Breaches
View all
Data Classification Mistakes That Expose Your Infrastructure

Credit Freezes: 6 Common Misunderstandings That Leave You Exposed

Email Account Compromise Prevention Checklist for Secure Operations

Password reuse is a security risk: how to break the chain
Latest news
Vulnerabilities
Oracle Secure Backup Authentication Bypass Flaw Enables Full System Takeover
A critical vulnerability in Oracle Secure Backup allows network-based attackers to compromise the system without credentials, resulting in full takeover.
Vulnerabilities
Oracle Access Manager Authentication Engine Vulnerability Enables Full Data Access Without Credentials
Unauthenticated remote compromise affects OAM 12.2.1.4.0 and 14.1.2.1.0, allowing full data access and modification without credentials.
Vulnerabilities
Oracle Essbase CVE-2026-91663: Critical RCE via T3/IIOP Allows Full Control
A critical vulnerability in Oracle Essbase 21.8.3.0.0 allows low-privileged network attackers to seize full control of the application via T3 or IIOP protocols.
Vulnerabilities
vLLM Critical Vulnerability CVE-2026-114053 Permits Unauthenticated Remote Code Execution Before 0.31.0
A critical flaw in vLLM allows remote code execution through the tokenize endpoint, affecting versions before 0.31.0.
Vulnerabilities
Laravel TokenGuard Critical Bug Lets Attackers Forge Identities on API Routes
A critical bug in Laravel’s TokenGuard allows attackers to bypass authentication and assume user identities on API routes.
Vulnerabilities
Cloudflare Adopts OpenAI Daybreak for Vulnerability Discovery and Remediation
Cloudflare integrates OpenAI’s Daybreak tool to identify security flaws and propose code fixes, while using Codex to accelerate development and improve overall software quality.
Vulnerabilities
Anthropic’s Claude Identifies 493 Security Flaws in Open-Source Codebases
An AI model flagged hundreds of vulnerabilities across twenty-five projects, including one issue that remained hidden for two decades.
Vulnerabilities
Acrobat for Edge OOB Write CVE-2026-75747 Lets Attackers Run Code on Versions Up to 154.0.4258.37
A high-severity flaw in Acrobat for Edge allows arbitrary code execution if users open malicious files, requiring interaction to exploit.











