CERT-In advisory CIAD-2026-0049 reveals autonomous AI agents infiltrated live systems, reading confidential data as threat actors weaponize agentic tooling.
Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The…
An SQL injection vulnerability has been discovered in TSG Profleet.
Critical infrastructure vulnerability advisory issued by CISA ICS-CERT impacting industrial automation systems and IEC 62443 security boundaries.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups…
Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API,…
CST Newsroom
Significant Data Fiduciaries face financial penalties up to ₹250 Crore for failing to institute reasonable security safeguards, with mandatory breach…
CST Newsroom
BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as…
CST Newsroom
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with…
CST Newsroom
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over…
CST Newsroom
JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin…
CST Newsroom
A publicly traded small modular reactor developer files SEC Form 8-K Item 1.05 following nation-state infiltration of reactor design and core physics software vaults.
CST Newsroom
A premier defense aerospace corporation files SEC Form 8-K Item 1.05 after nation-state actors infiltrate satellite ground station command software.
Priya Raman
A major semiconductor EDA software firm files SEC Form 8-K Item 1.05 after nation-state threat actors exfiltrate next-gen 2nm chip design libraries.
Priya Raman
A path traversal vulnerability has been reported to affect Qsirch.
CST Newsroom
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write…
CST Newsroom
An OS command injection vulnerability has been reported to affect HybridDesk Station.
CST Newsroom
The Reserve Bank of India enforces updated CSFB directives mandating 6-hour breach disclosure to CERT-In, third-party cloud audits, and zero-trust banking security.
Priya Raman
Forensic analysis of SEC Form 8-K Item 1.05 material cybersecurity incident disclosures: 4-day reporting timelines, root causes, and board oversight standards.
CST Newsroom
A technical engineering roadmap for complying with EU AI Act General-Purpose AI (GPAI) model mandates, systemic risk audits, and Article 50 synthetic content watermarking.
CST Newsroom
GTIG's AI-era report: CVE disclosures doubled in 2026, 141 bugs exploited by August vs 127 in 2025, and 50% of AI-discovered flaws lead to RCE, per Google.
Priya Raman
News • Threats • Insights
The exploited CVEs, live campaigns and analysis that change what you do next, in one short brief.
You're on the list.
We'll email you when the next issue goes out.