Cybersecurity
1,758 publications classified by Officially as Cybersecurity, judged from each publication's own title and summary.
Our reading, not the publisher's. An organization that has claimed its profile can say what its own publications are about, and that will take precedence here. See everything published by organizations filed under Cybersecurity instead.
-
The industry turned XDR and SIEM into categories. Sophos turned them into outcomes.
Sophos Next-Gen SIEM, now generally available as part of Sophos Fusion, brings security operations and compliance together through shared context.
-
Cisco security advisory (AV26-921)
Serial Number: AV26-921Date: September 14, 2026 As of September 14, 2026, Cisco is affected by vulnerabilities in the following products: Cisco AsyncOS for Cisco Secure Email Gateway Prio...
-
Apple Updates Everything, (Mon, Sep 14th)
Today, Apple released its annual update across all its operating systems. With that, Apple not only released new features but also patched 261 different vulnerabilities. This is the most vulnerabil...
-
CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
Bulletin ID: 2026-112-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/14/2026 10:45 AM PDT Description: Temporary Elevated Access Management (TEAM) is an open sourc...
Security notice Cybersecurity -
Как защитить банковское приложение и свои деньги?
Банковские приложения требуют особого внимания к цифровой безопасности. Надёжная защита входа, осторожность с кодами и доступом к устройству, а также контроль операций помогут снизить риск мошеннич...
Announcement Cybersecurity -
High-Severity Vulnerability in MongoDB Server
Attackers can exploit a high-severity vulnerability in MongoDB Server to gain full unauthenticated administrative access to the affected database. Patch promptly.
Announcement Cybersecurity -
Samsung mobile security advisory (AV26-919)
Serial number: AV26-919Date: September 14, 2026 As of September 8, 2026, Samsung published a security update to address vulnerabilities in the following product: Samsung mobile devices&nb...
-
Podatności w module "raty" Alior Bank dla PrestaShop
CERT Polska otrzymał zgłoszenie o 2 podatnościach typu SQL Injection (CVE-2026-7848 i CVE-2026-15600) wykrytych w module "raty" Alior Bank dla oprogramowania PrestaShop.
Announcement Cybersecurity -
Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR
The managed detection and response (MDR) market has reached a turning point. We’ve gone beyond the baseline of 24/7 monitoring focusing on the speed of detection and moved to a world with a converg...
Cybersecurity 2 versions -
MongoDB security advisory (AV26-918)
Serial number: AV26-918Date: September 14, 2026 As of September 11, 2026, MongoDB is affected by a vulnerability in the following product: MongoDB Server Prior to 7.0.43 Prior to 8.0.32 P...
-
How Attackers Abuse VSS, and How Huntress Detects It
Attackers exploit Volume Shadow Copy for credential theft and ransomware defense evasion. See how Huntress spots the difference from routine IT activity.
Cybersecurity 3 versions -
14th September – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 14th Setpember, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES IDScan.net, a US identity verification provid...
-
Revolut gave customer IDs and financial data to a government impostor
The digital bank was tricked into releasing sensitive customer information, including IDs, to an attacker using a legitimate government email domain.
-
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
On September 10, 2026, GitLab published a critical patch release for GitLab Community Edition (CE) and Enterprise Edition (EE). The release addresses CVE-2026-85706, a critical path traversal vulne...
Cybersecurity 2 versions -
Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection
We designed a behavioral clustering model to map cloud identity roles from audit logs, enabling continuous threat detection using standard SQL queries. The post Unmasking Cloud Identities: From Beh...
-
A week in security (September 7 – September 13)
A list of topics we covered in the week of September 7 to September 13 of 2026
-
（論文）金融研究所DPS：ユーザブルセキュリティ研究の現状と展望
Announcement Cybersecurity -
（論文）金融研究所DPS：ユーザブルセキュリティ研究の現状と展望
Announcement Cybersecurity -
ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split
Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.
-
Millions of people to benefit from simpler, more secure way to sign in to government services
Passkeys are being rolled out across GOV.UK One Login, giving more than 23 million users a faster and more secure way to access government services.
-
Critical Vulnerabilities in Check Point Quantum Security Gateway and Security Management Server
Attackers can exploit critical vulnerabilities in Check Point Quantum Security Gateway and Security Management Server to perform remote code execution without authentication. Patch immediately.
Announcement Cybersecurity -
Kritieke kwetsbaarheid in GitLab wordt actief misbruikt: update nu
Er is een kritieke kwetsbaarheid in GitLab Community Edition en Enterprise Edition gevonden met het kenmerk CVE-2026-85706. De kwetsbaarheid heeft een CVSS-score van 10.0 en wordt actief misbruikt....
-
GitLab rättar kritiska sårbarheter
GitLab har publicerat säkerhetsuppdateringar för flera sårbarheter i GitLab Community Edition (CE) och Enterprise Edition (EE). [1] Två av dessa sårbarheter, CVE-2026-85706 och CVE-2026-87719, klas...
Announcement Cybersecurity -
GitLab security advisory (AV26-917)
Serial Number: AV26-917Date: September 11, 2026 As of September 10, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.1.8 Prior to 19.2.6 Prior to 19.3.2 On S...
-
JFrog security advisory (AV26-867) – Update 2
Serial number: AV26-867Date: September 1, 2026Updated: September 11, 2026 As of August 28, 2026, JFrog is affected by a vulnerability in the following product: Artifactory Prior to 7...
-
VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index
An out-of-bounds (OOB) memory access vulnerability involving unchecked array indexing has been identified in the exllamav3_ext compute unified device architecture (CUDA) extension. Successful explo...
-
n8n security advisory (AV26-916)
Serial Number: AV26-916Date: September 11, 2026 As of September 8, 2026, n8n is affected by a vulnerability in the following product: n8n Prior to 2.37.7 Prior to 2.38.2 Prior to 1.123.76 The Cyber...
-
ConnectWise security advisory (AV26-903) – Update 1
Serial number: AV26-903Date: September 9, 2026Updated: September 11, 2026 As of September 8, 2026, ConnectWise is affected by a vulnerability in the following product: ScreenConnect ...
-
CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
Bulletin ID: 2026-111-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 12:00 PM PDT Description: Kiro IDE is an agentic development environment that makes it...
-
Progress security advisory (AV26-915)
Serial Number: AV26-915Date: September 11, 2026 As of September 11, 2026, Progress Software is affected by a vulnerability in the following product: Chef Automate Prior to 4.13.520 The Cyber Centre...
-
CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2
Bulletin ID: 2026-110-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 10:00 AM PDT Description: An issue exists in the the EventStream header decoder in AWS...
Security notice Cybersecurity -
CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
Bulletin ID: 2026-109-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 09:30 AM PDT Description: The AWS Advanced JDBC Wrapper is an open-source library that...
Security notice Cybersecurity -
CVE-2026-89065 and CVE-2026-89066: Issue with projen - Path traversal and OS command injection
Bulletin ID: 2026-108-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 09:00 AM PDT Description: projen is an open-source tool for defining and synthesizing ...
Security notice Cybersecurity -
A Community Guide to the EU CRA September 11 Deadline for Manufacturers
The EU Cyber Resilience Act (CRA) introduces new cybersecurity requirements for products with digital elements. Discover what the September 11, 2026 reporting deadline for manufacturers means for t...
-
[Control Systems] National Instruments security advisory (AV26-914)
Serial number: AV26-914Date: September 11, 2026 As of September 10, 2026, National Instruments is affected by vulnerabilities in the following products: SystemLink Prior to or equal to 20...
-
[Control systems] GeoVision security advisory (AV26-913)
Serial number: AV26-913Date: Septembre 11, 2026 As of September 10, 2026, GeoVision is affected by vulnerabilities in the following product:: GV-LPC2011/LPC2211 Firmware version 1.13 The ...
-
[Control systems] Schneider Electric security advisory (AV26-912)
Serial number: AV26-912Date: September 11, 2026 As of September 9, 2026, Schneider Electric is affected by vulnerabilities in the following products: EcoStruxure™ IT Data Center Expert (F...
-
Crypto customers targeted by scammers after email marketing provider breach
A breach at email marketing company Brevo exposed Trezor, CoinTracking, and BitBox customers to phishing emails, but others may also be at risk.
-
GCP-2026-033
Published: 2026-05-14Updated: 2026-07-16Description Description Severity Notes 2026-07-16 Update: The following versions of GKE are updated with code to fix this vulnerability on Ubuntu. …
Security notice Cybersecurity -
GCP-2026-034
Published: 2026-05-20Description Description Severity Notes A vulnerability was found in Apigee where the IntegrationRegion parameter in the SetIntegrationRequest policy lacks validation, allowing ...
Security notice Cybersecurity -
GCP-2026-035
Published: 2026-06-08Description Description Severity Notes A vulnerability was found in Envoy where HTTP/2 downstream request processing allow an unauthenticated remote client to trigger excessive...
Security notice Cybersecurity -
GCP-2026-036
Published: 2026-06-09Description Description Severity Notes ARM has announced CVE-2025-10263, an architectural issue affecting some Arm cores which lets an attacker bypass translation stages or GPT...
Security notice Cybersecurity -
GCP-2026-037
Published: 2026-06-18Updated: 2026-06-20Description Description Severity Notes 2026-06-20 Update: Added GKE patch versions containing the fixes for Container-Optimized OS node images for minor vers...
Security notice Cybersecurity -
GCP-2026-038
Published: 2026-06-22Description Description Severity Notes A vulnerability was found in App Engine where the GetDashboardAppStats GraphQL private API operation in the Google Cloud console leaked c...
Security notice Cybersecurity -
GCP-2026-039
Published: 2026-06-22Description Description Severity Notes A vulnerability in Cloud Logging could have allowed attackers to hijack log sink destinations by recreating the target Cloud Storage buck...
-
GCP-2026-040
Published: 2026-06-23Description Description Severity Notes A series of vulnerabilities were discovered in Envoy Proxy. For instructions and more details, see the Cloud Service Mesh security bullet...
-
GCP-2026-041
Published: 2026-06-24Description Description Severity Notes A recent security investigation was conducted regarding log4j vulnerabilities (CVE-2026-34480 and CVE-2026-34477) reported in Apigee Edge...
-
GCP-2026-042
Published: 2026-06-24Description Description Severity Notes A privilege escalation vulnerability was addressed in Cloud Build. Previously, for GitLab Enterprise and Bitbucket Data Center connection...