Browsing: Vulnerability

The agency wants to help companies sort through the AI-fueled avalanche of bug reports.

Cybersecurity and Infrastructure Security Agencyis warning that this CVE numbered vulnerability (CVE-2026-19490) which has a CVSS score of 9.3, has been exploited, following an alert posted last week byPrevidianfounder and former WatchTowr head of threat intelligenceRyan Dewhurst. The defect affects all NetScaler ADC and NetScaler Gateway appliances configured as a gateway or an AAA virtual…

H1 2026 activity showed a continued adversary preference for abusing legitimate tools, trusted platforms, and routine workflows already present in enterprise and consumer environments. Threat actors used exposed software, developer tools, remote access utilities, payment workflows, and third-party services to gain access, steal credentials, move laterally, and monetize intrusions while blending into expected activity. This…

A critical flaw in JFrog Artifactory, the software registry that sits at the center of build pipelines for thousands of enterprises, is now being actively exploited in the wild. Tracked as CVE-2026-82329 and rated 9.8 out of 10 on the CVSS scale, the bug lets an unauthenticated attacker with nothing more than network access mint…

Risk managers, auditors and senior executives at 316 companies spent April and May ranking 20 threats they have not yet felt. AI discovery of cyber vulnerabilities came back first Three months earlier the same quarterly survey put information integrity risk at the top and left AI vulnerability discovery out of the top five

TrendAI has adopted Anthropic’s Claude Opus 5 model for vulnerability prioritisation and virtual patching, extending its earlier work with Claude Opus 4.8.

As frontier AI models give attackers a shrinking window to strike, Harness gives security teams a way to keep pace

The U.S. government’s promises about the “Gold Eagle” coordination program are overblown, experts said, but the initiative could help organizations prioritize patching and mitigation.

Jacob Riggs has launched Australian cybersecurity company Bugtri in Sydney, with 11 organisations already using the platform in an early-access phase.

Threat actors have already begun exploiting the flaw, according to the U.S. government.