Cybersecurity
1,881 publications from 84 organizations filed under Cybersecurity.
Filed by publisher, not by subject — these are everything those organizations published, not everything published about Cybersecurity. See the 1,759 publications Officially classified as Cybersecurity instead.
-
Sophos Ranked #1 Overall in Endpoint, XDR, MDR, and Firewall in the G2 Fall 2026 Reports
Sophos is the only vendor recognized as a Leader across all five of these core cybersecurity markets.
-
The Cloudflare Blog — brought to you by EmDash
We migrated the Cloudflare Blog to EmDash to prove our stack at massive scale. Here is how we stress-tested performance, safely routed production traffic, and redesigned the frontend experience.
-
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
A technical analysis of CVE-2026-63520, a remote code execution vulnerability due to an unrestricted .NET type instantiation, affecting Microsoft SharePoint.
-
VU#728712: Konami's Metal Gear Online 3 contains a heap-based buffer overflow
Overview Konami's Metal Gear Online 3 video game contains a heap-based buffer overflow that can be triggered by an input‑validation vulnerability that allows match hosts to remotely execute arbitra...
-
24th August – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 24th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Latvia’s Road Traffic Safety Directorate (CSDD) ...
-
New Huntress View for Security Incident Investigations
See how the Huntress SOC runs security incident investigations from first signal to final resolution, including the ones closed as benign.
Cybersecurity 2 versions -
Pulje er åben: Skal ruste danskerne til kriser
Nu kan civilsamfundsorganisationer for andet år i træk søge penge gennem en pulje, der skal styrke danskernes viden om beredskab og gøre dem klar til at handle under en krise. Fristen for ansøgning...
Announcement Education -
Podatności w oprogramowaniu routerów KAON PG5298A/PG5298B
W oprogramowaniu routerów KAON PG5298A/PG5298B wykryto 2 podatności różnego typu (CVE-2025-63080 oraz CVE-2026-6017)
Announcement Cybersecurity -
Museum heists turn violent: new Europol report on cultural property theft tactics
The spotlight features some key findings:Increasing violence: Museum thefts are becoming more aggressive, with offenders using tools like sledgehammers, explosives, and firearms to breach premises ...
Announcement -
Critical GeoServer SQL Injection Vulnerability: 20260824005
Severity CRITICAL Threat Category Vulnerability (SQL Injection, Potential Remote Code Execution) Affected Platforms GeoServer Application versions < 2.27.6, < 2.28.5, […] The post Critical Ge...
Announcement Cybersecurity -
Mandatory caller ID is proving effective: Fraudulent calls made in the name of public authorities have fallen by over 75 per cent
Measures to combat fraudulent calls made in the name of public authorities are proving effective. The number of reports fell by over 75 per cent in July following the extension of the mandatory cal...
Announcement Cybersecurity -
Say it once: introducing Bot Preference Sync
Cloudflare's new Bot Preference Sync automatically aligns your robots.txt file with your AI bot policies for Search, Agent, and Training. Easily manage which bots access your content without mainta...
-
Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain
Attackers are targeting CI/CD pipelines and developer tools instead of application code, requiring total SDLC visibility and strict security controls The post Connecting the Dots: Securing the Over...
-
What Is Account Takeover Fraud? A Comprehensive Guide | Huntress
Account takeover (ATO) fraud happens when attackers steal login credentials to access accounts. Learn how to detect and prevent account takeover fraud.
-
RMM Abuse: How Attackers Exploit Remote Access Tools | Huntress
RMM abuse jumped 277% & now shows up nearly 40% of Huntress investigations. See how attackers exploit trusted remote access tools, and how to stop it.
-
VU#756733: Retraction of "Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability"
Overview The Calix GS7 XGS GS5239XG router running firmware EXOS/6.6.47 contains a missing authentication vulnerability that exposes its UPnP (Universal Plug and Play) WANIPConnection service on th...
-
The Good, the Bad and the Ugly in Cybersecurity – Week 34 (2026)
U.S. indicts Iranian cyber espionage operations, Medusa ransomware breaches 500 organizations, and attackers exploit a critical Windows protocol flaw.
-
CERT-SE:s veckobrev v.34
I veckans brev kan du läsa om ett flertal intrång, störningar i system samt om sårbarheter som utnyttjas aktivt av hotaktörer.
Announcement Cybersecurity -
The invisible passenger in your car
Kaspersky expert has discovered new Android malware designed to serve ads and build a proxy botnet. It's delivered through legitimate software for DoFun head units.
-
Is Cyber missing the Marque?
In this week's newsletter, new author Mick Baccio introduces himself and explores the operational and security implications of the new White House memorandum regarding private sector participation ...
-
From all-or-nothing to task-based OAuth consent
Cloudflare OAuth now supports optional scopes, giving users more control over what an app can access and helping developers build secure consent flows around the task at hand.
-
BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive
Research by: Jiří Vinopal (@vinopaljiri) Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? What if a signed Microsoft remediation drive...
-
Kritisk sårbarhet i Citrix NetScaler
Citrix publiserte onsdag 19. august detaljer om to nye sårbarheter i NetScaler ADC og NetScaler Gateway. NSM forventer at sårbarhetene vil bli utnyttet.
Announcement Cybersecurity -
Kritisk sårbarhet i Citrix NetScaler ADC och NetScaler Gateway
Citrix har publicerat information om en kritisk sårbarhet som påverkar Citrix NetScaler ADC och NetScaler Gateway. Sårbarheten, CVE-2026-19490, har fått CVSS v.4-klassning på 9.3. [1, 2]
Announcement Cybersecurity -
Podatności w oprogramowaniu ATutor
W oprogramowaniu ATutor wykryto 13 podatności różnego typu (od CVE-2026-64960 do CVE-2026-64972)
Announcement Cybersecurity -
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
The newly identified SPECTRE implant represents an evolution in commodity intrusion tooling, integrating cross-platform C2 operations, process injection, credential theft, anti-analysis protections...
-
Identity Abuse Through Trusted Communication Channels
Unit 42 details how attackers exploit enterprise collaboration tools for identity phishing and credential theft. Discover key defense strategies. The post Identity Abuse Through Trusted Communicati...
-
Meerdere kwetsbaarheden in Apple macOS Tahoe
Er zijn diverse kwetsbaarheden gevonden in Apple macOS Tahoe, waaronder CVE-2026-65346 met een hoge CVSS-score van 8.8. Deze kwetsbaarheden betreffen geheugenbeheer en verwerking van webcontent wat...
-
Ernstige kwetsbaarheden in Apple iOS en iPadOS
Apple heeft diverse kwetsbaarheden opgelost in iOS en iPadOS, waaronder CVE-2026-3783 en CVE-2026-43757 met CVSS-scores tot 9.8. Deze kwetsbaarheden zijn beoordeeld als middelmatig qua kans op misb...
-
FIRST Unveils VulnOptiCON 2026 to Address the Future of Vulnerability, Threats and Cybersecurity Risk
Global security practitioners convene to advance vulnerability tracking and exploitation predictability, and explore security risks of Artificial Intelligence (AI)
-
NSA and Others Release Report on Active Threats of Programmable Logic Controllers
FORT MEADE, Md. — (August 19, 2026) Today, the National Security Agency (NSA) and other co-sealing agencies released the Cybersecurity Advisory (CSA), "Defending Against an Active Threat to Siemens...
Announcement Cybersecurity -
VU#874418: RDK-B WebUI contains multiple vulnerabilities
Overview RDK Central RDK-B WebUI version, rdkb-2025q4-kirkstone, contains multiple vulnerabilities involving memory corruption, improper authentication, race conditions, and insufficient input vali...
-
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
On August 19, 2026, a security advisory was published for CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability carr...
Cybersecurity 2 versions -
[release-branch.go1.27] go1.27.0
Change-Id: I9ff6bc81cccdd7876e7b36c395151f70ab3ac654 Reviewed-on: https://go-review.googlesource.com/c/go/+/817701 Reviewed-by: Carlos Amedee [email protected] Auto-Submit: Gopher Robot gobot@golan...
-
2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
On 19 August 2026, Citrix published a security advisory addressing multiple critical vulnerabilities in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway). CERT-EU ...
Advisory Cybersecurity -
A revisit of remote Spectre attacks on Cloudflare Workers
In 2024 and 2025, we reassessed remote Spectre attacks on our Workers infrastructure. We share details about the new attack primitives like Spectre gadgets, remote timers, achieving co-location and...
-
[release-branch.go1.25] go1.25.14
Change-Id: I9e3fddf67829ff8d68e49f38b44e298327d554db Reviewed-on: https://go-review.googlesource.com/c/go/+/817740 Reviewed-by: Dmitri Shuralyov [email protected] Reviewed-by: Carlos Amedee carlo...
-
[release-branch.go1.26] go1.26.7
Change-Id: Ia3e132d4c983f77f720a01d12ff0222a39d03c18 Reviewed-on: https://go-review.googlesource.com/c/go/+/817760 TryBot-Bypass: Gopher Robot [email protected] Reviewed-by: Carlos Amedee carlos@gol...
-
Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
Huntress researcher uncovers post-Black Hat & DEF CON phishing campaign using X DMs & malicious documents to deliver AMOS, NetSupport RAT, and other malware.
-
Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America
Cássio De Alcântara is Director, LATAM Sales at Rapid7. Across Latin America, organizations are embracing cloud, AI, and digital transformation to drive innovation and business growth. These techno...
Cybersecurity 2 versions -
Podatności w oprogramowaniu nnn
W oprogramowaniu nnn wykryto 4 podatności różnego typu (od CVE-2026-65609 do CVE-2026-65612)
Announcement Cybersecurity -
A Detection Engineer's Guide for Delegating Work to AI
Before delegating work to AI, ask one question: can you check the output? A detection engineer on why verification, not trust, decides what tasks you hand over.
-
Fake AI, real malware: Attackers impersonating AI brands
A year of MDR casework shows attackers repeatedly exploiting demand for AI tools
-
Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)
In August 2026, the actor TheHatman claimed to have stolen large volume of credentials from organizations' Microsoft Entra tenants. We provide guidance on mitigating large-scale credential attacks....
-
BGP Role model: tracking the adoption of RFC 9234
RFC 9234 lets routers reject route leaks on their own, using BGP Roles and the Only to Customer attribute. We measured who has deployed it, and found two Tier 1 networks unexpectedly stripping OTC.