Attackers chain two PaperCut NG and MF flaws for unauthenticated remote code execution, with limited exploitation seen in two ...

Android 17 adds OS-wide ECH, local network permissions, default certificate transparency, and carrier-controlled 2G blocking.

Two Unitree G1 EDU vulnerabilities enable separate root RCE chains, including a BLE path; fixed firmware versions remain ...

Learn how Fabric improves visibility across users, APIs, non-human identities, and AI agents so teams can reduce risk and ...

A cluster of 19 Chrome and Edge extensions can steal wallet secrets, drain crypto, harvest credentials, and inject code into ...

ServiceNow patched four AI Platform flaws, including three CVSS 10.0 bugs that can enable unauthenticated code execution or ...

PaperCut says a zero-day affecting all NG and MF versions is actively exploited; emergency patches are available for v25 and ...

Panel patches CVE-2026-65643, a critical flaw that lets authenticated accounts with domain controls execute code as root.

CISA adds six exploited flaws to KEV, including a NetScaler bug tied to web shells and 36 exploitation attempts in 12 days.

Australian police charged two men over their alleged TeamPCP role in supply chain compromises affecting Trivy, KICS, and ...

GoCaracal gave operators remote shell access and browser data theft during a June 2026 intrusion at a Venezuelan ...

Recorded Future links HOOKEDGE campaigns targeting European government and diplomatic organizations to APT28 with moderate confidence.