Do Son Cisco SD-WAN vulnerability CVE-2026-20303 and CVE-2026-20304 reach CVSS 9.9. Cisco urges Catalyst SD-WAN customers to patch now.
Six SGLang vulnerabilities include unauthenticated RCE via CVE-2026-15969, plus data and model-weight theft. No patch exists yet.
CVE-2026-9044 is a command injection flaw in TP-Link Archer AXE75 OpenVPN, CVSS 8.5. Update to firmware 1.5.6 Build 20260623 now.
IBM critical vulnerabilities hit App Connect, Power HMC, and webMethods. CVE-2026-12943 lets attackers execute arbitrary commands at CVSS 9.8.
cybernewswire
Las Vegas, United States, 5th August 2026, CyberNewswire
This interactive su TIOCSTI bug is a critical Linux suTrap LPE flaw allowing root session hijacking. Exploit code details are publicly disclosed.
Cisco IOS XE vulnerability CVE-2026-20272 hits CVSS 9.8 and CVE-2026-20267 scores 9.0. Cisco urges customers to patch now.
SIngapore, Singapore, 5th August 2026, CyberNewswire
NVIDIA warns of a critical 9.8 CVSS NVIDIA Dynamo flaw (CVE-2026-24254) leading to code execution. Update to the latest version to secure your systems.
Apple restricts its Bug Bounty program to combat a surge of fake AI-generated vulnerability reports, instituting caps to protect critical flaw detection.
Perplexity secured a major legal victory as an appeals court overturned an Amazon ban, allowing the Perplexity AI shopping bot to resume price comparisons.
Microsoft is aggressively pushing a OneDrive Photos forced install on all Windows devices. This beta app frustrates enterprise IT admins and individual users.
Kaspersky GReAT uncovered OctLurk and SilkLurk, two new memory-resident backdoors targeting Central Asian governments since January 2025.
Group-IB uncovered XMRig Linux PAM abuse that lets a fileless Monero miner regenerate across user accounts and vanish from disk forensics.
Unit 42 exposed an autonomous AI cyberattack by a Chinese threat actor using DeepSeek to scan, pivot, and exploit targets on its own.
Adform experienced a cyber attack where hackers altered ad scripts to hijack cryptocurrency addresses. Learn how this supply chain attack affects users.
Microsoft explains why Windows Control Panel migration takes so long. Legacy driver support and enterprise compatibility delay the complete transition.
Cloudflare Wallets gives AI agents a native payment method and verifiable identity via x402 protocol, enabling autonomous micropayments without human intervention.
GenieLocker ransomware hits Russia's manufacturing sector on Windows, Linux, and ESXi. Linked to the Toy Ghouls group, it leaves no ransom note.
A high-severity Django vulnerability, CVE-2026-15307, can enable remote code execution through spatial lookups. Update to Django 6.0.8 or 5.2.17 now.
CISA added three bugs to its KEV list. An N-able N-central authentication bypass is exploited in the wild to deploy RMM tools. Patch by August 7.
A pgAdmin 4 RCE flaw, CVE-2026-17566, lets attackers run OS commands via psql. Two more critical bugs also got fixed in version 9.17.