The Edge of the Cyber World See the latest
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026. The vulnerabilities are listed below – CVE-2026-20079 (CVSS score: 10.0) – An authentication
A suspected Russian-speaking cyber actor has been attributed to the use of artificial intelligence (AI) to devise exploits targeting a recently disclosed pair of security flaws in PaperCut NG/MF and break into hundreds of instances. According to independent reports from Blackpoint Cyber and GreyNoise, the activity originates from “45.142.193[.]132,” an IP address that has been…
Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen. The post Chinese espionage groups swarm to exploit triple-link chain of zero-days appeared first on CyberScoop.
The exploit provides full System privileges on Windows machines running the September 2026 patches. The post New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender appeared first on SecurityWeek.
The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026. The post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.
An analysis of Project Glasswing findings shows only a fraction have reached disclosure, and an even smaller number have been fixed.
Artificial intelligence has crossed a threshold in cybersecurity, and the numbers back it up. CrowdStrike’s 2026 Threat Hunting Report, released August 3, 2026, found that 88% of vulnerabilities with a public proof-of-concept exploit were weaponized within 48 hours during the first half of the year. Days after that, IBM’s 2026 Cost of a Data Breach…
The Cybersecurity and Infrastructure Security Agency added a vulnerability to its Known Exploited Vulnerabilities catalog on September 2, 2026, that looks different from the usual entries on that list. CVE-2026-59822 does not target a firewall, a VPN gateway, or a mail server. It targets LiteLLM, an open-source proxy that routes traffic between applications and large…
Japan’s National Police Agency confirmed 123 ransomware cases in the first six months of 2026, the highest half-year total since the agency began compiling this data in 2020. The figure, released Thursday and first reported by The Japan Times, is up by seven cases from the same period a year earlier. It lands during a…
osquery turns every laptop, server, and container host into a queryable SQL database. Instead of grepping log files or SSHing into a box to check what processes are running, you write a SELECT statement. Meta built it internally, open-sourced it in 2014, and it now sits under the osquery Foundation inside the Linux Foundation, licensed…
