Microsoft's prediction that attackers probably wouldn't rush to exploit a newly-patched SharePoint bug hasn't aged especially ...

Sentire says attacks began June 29 against a CVSS 9.6 OS command injection flaw that enables unauthenticated code execution.

BeyondTrust authentication bypass flaws CVE-2026-40138 and CVE-2026-40139, both CVSS 9.2, let unauthenticated attackers seize ...

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access ...

IBM and Red Hat launch Lightwell to defend open-source code from AI attacks ...

Federal agencies operating on-premises Microsoft SharePoint Server are under a hard patch deadline today — July 4, 2026 — after the U.S. Cybersecurity and Infrastructure Security Agency confirmed on ...

On 30 May 2026, Nauru Ocean Resources Inc. (“NORI”) and Tonga Offshore Mining Ltd. (“TOML”), two subsidiaries of The Metals ...

Writer patched WriteOut after Sand Security found sandbox previews could forward session cookies into attacker-controlled ...

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities ...

Citrix NetScaler received patches for another memory leak vulnerability similar to CitrixBleed, as well as memory overflow, file read and denial-of-service issues ...

CertiK's H1 2026 Hack3d report finds $1.32B lost across 344 incidents — down 47% on paper, but roughly 28% higher than H1 ...