The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf. [...]
The big picture: Critical Palo Alto VPN bug now exploited by... — should prompt a review of your own security.
Microsoft has shared manual mitigations to help IT administrators fix Windows Server Update Services (WSUS) servers affected by a known issue that causes Windows Update scans to fail or time out. [...]
The big picture: Microsoft shares manual fix for WSUS sync delays... — highlights growing cyber threats.
Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The two security flaws, tracked as CVE-2026-63030 and CVE-2026-60137, hav...
Bottom line from The Hacker News: this exposes vulnerabilities that affect millions.
Free unofficial patches are available for a recently disclosed Windows zero-day flaw that allows attackers to escalate privileges on up-to-date Windows systems. [...]
BleepingComputer reports: Windows LegacyHive zero-day flaw gets free, unofficial patches — this exposes vulnerabilities that affect millions.
Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying ENCFORGE, a new compiled Go ransomware designed to encrypt model ...
Why it matters: New ENCFORGE Ransomware Targets AI Model Files in... underscores the cost of weak defenses.
Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat intelligence firm said it's observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sa...
Bottom line from The Hacker News: this should prompt a review of your own security.