Browsing: Vulnerability

Ransomware groups continue to target a high-severity vulnerability in Palo Alto Networks products, despite a security patch being released five months ago

A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-18397 and commonly referred to as the SConnect vulnerability, has been identified in middleware components used by SWIFT banking systems and government authentication portals. This flaw fundamentally undermines the trust layer of authentication, enabling attackers to bypass multi-factor authentication (MFA) and gain privileged access to highly sensitive environments.…

The number of vulnerabilities detected in code continues to rise. According to Kaspersky’s threat analysis, 5,200 critical vulnerabilities were found in the first half of this year alone — nearly 50% more than during the same period last year. At the same time, the average gap between the publication of information about a vulnerability and…

Most businesses will know that AI has made cyberattacks faster and more powerful. High-profile incidents, notably involving frontier AI model tests, have illustrated the pressure being put on organizational defenses that are designed to operate at the speed of human decisions, not the quicksilver rapidity of AI automation.

Add preferred source AI tools are rewriting the cybersecurity landscape at unprecedented speed. The total number of registered CVE vulnerabilities globally surged from 33,512 to 66,401 over the past year—a 100% increase. Microsoft patched a record 974 vulnerabilities this month alone; Oracle released 1,448 patches in July, nearly quadruple the 309 from July 2025; Google…

The agency wants to help companies sort through the AI-fueled avalanche of bug reports.

Cybersecurity and Infrastructure Security Agencyis warning that this CVE numbered vulnerability (CVE-2026-19490) which has a CVSS score of 9.3, has been exploited, following an alert posted last week byPrevidianfounder and former WatchTowr head of threat intelligenceRyan Dewhurst. The defect affects all NetScaler ADC and NetScaler Gateway appliances configured as a gateway or an AAA virtual…

H1 2026 activity showed a continued adversary preference for abusing legitimate tools, trusted platforms, and routine workflows already present in enterprise and consumer environments. Threat actors used exposed software, developer tools, remote access utilities, payment workflows, and third-party services to gain access, steal credentials, move laterally, and monetize intrusions while blending into expected activity. This…

A critical flaw in JFrog Artifactory, the software registry that sits at the center of build pipelines for thousands of enterprises, is now being actively exploited in the wild. Tracked as CVE-2026-82329 and rated 9.8 out of 10 on the CVSS scale, the bug lets an unauthenticated attacker with nothing more than network access mint…

Risk managers, auditors and senior executives at 316 companies spent April and May ranking 20 threats they have not yet felt. AI discovery of cyber vulnerabilities came back first Three months earlier the same quarterly survey put information integrity risk at the top and left AI vulnerability discovery out of the top five