Stories tagged “Enterprise Security.”
30 stories
Attackers have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040, which refers to a critical security feature bypass that stems from weak authentica…
Two security firms found that Atlassian's Rovo assistant can be tricked into sending Jira and Confluence data to attackers. The firms used different routes to demonstrate the vulnerability, with one route confirmed closed. The issue leaves customers without a patch to app…
N-able has released a second hotfix for its N-central RMM product to address ongoing exploitation of a security flaw, CVE-2026-18577, which attackers are leveraging to gain administrative access and establish persistence on managed systems.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.
The INC Ransomware operation has emerged as the dominant threat actor exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. Fixes for the vulnerability pair were released by SonicWall in mid-July 2026.
The article discusses the role of AI in security operations and how different types of AI are designed for different jobs. It highlights the importance of understanding the difference between AI platforms like Claude and autonomous AI SOCs in order to achieve better secur…
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.
Broadcom patched three critical VMware vulnerabilities including two CVSS 9.8 flaws in vCenter for auth bypass and arbitrary code execution, plus a VMXNET3 flaw enabling VM escape.
n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform.
A critical vulnerability in OpenAI's ChatGPT Workspace Agents could have allowed a single phishing link to deploy a rogue AI agent inside a victim's organization. The issue has been addressed by OpenAI as of June 8, 2026.
Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners in their organizations. AI governance done right gives security teams the visibility they need, employees the tools they want, and CISOs the strategic influence they have e…
A critical security flaw (CVE-2026-6875) in the ServiceNow AI Platform is being actively exploited in the wild, allowing unauthenticated users to execute arbitrary code.
CISA has added a critical Microsoft SharePoint Server zero-day vulnerability (CVE-2026-58644) to its Known Exploited Vulnerabilities catalog, mandating federal agencies to patch it by July 19, 2026, due to active exploitation.
A vulnerability in n8n's token exchange feature could allow attackers to log in as users from another issuer. The flaw, tracked as CVE-2026-59208, was fixed on June 24, but the CVE record did not go public until July 9.
Zoom has released urgent security updates for its Windows clients to address a critical vulnerability (CVE-2026-53412) that could allow unauthenticated account takeover.
Mozilla has released updates to address two critical flaws in Firefox, while Google has shipped fixes for 15 security flaws in Chrome, including two critical use-after-free bugs. Adobe has also published security updates for 88 vulnerabilities, including multiple critical…
For years, routing traffic through cloud proxies was good enough. However, with the rise of AI and modern workflows, traditional SASE architectures are struggling to keep up. The inspection model has stopped keeping up with the shift to the presentation layer, where data …
SonicWall has issued a warning about the active exploitation of two zero-day vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances, with one flaw allowing arbitrary command execution. Urgent patches have been released, and CISA has added these vu…
SAP has rolled out updates to address multiple vulnerabilities, including a critical flaw in SAP NetWeaver Application Server ABAP. The vulnerability in question is CVE-2026-44747 (CVSS score: 9.9), an out-of-bounds write flaw that allows an authenticated attacker to leve…
Grok Build, a coding CLI developed by xAI, was found to be uploading entire Git repositories to a Google Cloud Storage bucket, including files that were not read by the model. This behavior was discovered by a researcher who tested version 0.2.93 of the binary and found t…
A new remote access trojan (RAT) called MODBEACON has been discovered, attributed to the China-linked cybercrime group Silver Fox. The malware uses gRPC streaming for encrypted command-and-control (C2) traffic and has been found to be used in a campaign targeting technolo…
Hackers are using fake Microsoft Entra passkey enrollment to gain Microsoft 365 access. A threat actor has been targeting organizations with voice-based fake security requests, prompting users to enroll a new Entra passkey.
BeyondTrust has fixed four vulnerabilities, including two critical pre-authentication authentication bypass flaws (CVSS 9.2), in its Remote Support and Privileged Remote Access products.
IHM breaks down with AI agents due to lack of HR records and predictable transitions.
A security firm created a fake AI agent skill that passed security scans and reportedly reached 26,000 agents. The skill was designed to collect user email addresses and demonstrated vulnerabilities in skill-scanning tools.
A one-click flaw in Microsoft 365 Copilot could have let attackers steal emails, files, and MFA codes. Researchers at Varonis Threat Labs discovered the flaw, which is now mitigated by Microsoft.
Fortinet, Ivanti, and SAP issued fixes for critical flaws that could enable code execution, account takeover, or data exposure.
Check Point patched two VPN flaws, including one used in zero-day attacks tied to Qilin ransomware activity. The exploitation hit only a few dozen organizations, but was active worldwide.
The piece argues that modern IAM hides too much identity activity and that IVIP tools can expose and govern it. Orchid Security is presented as an example of this approach.
Hackers are abusing a FortiClient EMS auth bypass to run scripts that install EKZ, a credential-stealing malware, on endpoints.