Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
CVE-2026-56164: privilege escalation in Microsoft SharePoint without login
Microsoft has recorded exploitation of the privilege escalation vulnerability CVE-2026-56164 in Microsoft SharePoint Server, related to missing authentication for a ...
Claude incidents: why Anthropic shut off the internet for internal tests
Anthropic has temporarily disabled live internet access for all internal evaluations of its AI models after a series of incidents ...
CVE-2026-107406 in Citrix NetScaler: SAML configurations at risk of remote code execution
Citrix has released updates to address the critical CVE-2026-107406 vulnerability in NetScaler ADC and NetScaler Gateway. Under certain SAML settings ...
Remote code execution vulnerability in Microsoft SharePoint: risks and protection
CVE-2026-58644 is a remote code execution vulnerability in Microsoft SharePoint related to deserialization of untrusted data that is already being ...
Branch Target Reuse: how the new Spectre v2 variant hits JIT, the Linux kernel and sandboxes
Researchers have presented a new variant of the Spectre v2 class of attacks called Branch Target Reuse (BTR), which affects ...
Remote code execution in LMCache: risk for LLM clusters and multi-tenant environments
The critical CVE-2026-105192 vulnerability in LMCache, used to accelerate large language model servers such as vLLM, allows an unauthenticated remote ...
CVE-2026-21589 in Atlassian Data Center: risk analysis and urgent response steps
The critical vulnerability CVE-2026-21589 (CVSS 9.3) in Atlassian Data Center products is already being actively probed by attackers: according to ...
New Linux backdoors in telecom and email gateway devices in Korea and Taiwan
New variants of the Linux backdoors BPFDoor, Rekoobe and a fresh implant called AVERAT have been identified in network and ...
CVE-2026-21589 in Atlassian Data Center: data leak risk and what to do
CVE-2026-21589 is a critical vulnerability (CVSS 9.3) in eight Atlassian Data Center products that allows a remote unauthenticated attacker to ...
How the macOS Full Disk Access change will impact AI agents and data security
Apple has announced plans to change how macOS Full Disk Access is configured so that access to the full contents ...
