Cybersecurity
1,758 publications classified by Officially as Cybersecurity, judged from each publication's own title and summary.
Our reading, not the publisher's. An organization that has claimed its profile can say what its own publications are about, and that will take precedence here. See everything published by organizations filed under Cybersecurity instead.
-
CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
Bulletin ID: 2026-107-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/10/2026 11:30 AM PDT Description: AWS Systems Manager Agent (SSM Agent) is software that runs ...
-
HPE security advisory (AV26-909)
Serial number: AV26-909Date: September 10, 2026 As of September 9, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: ClearPass Policy Manage...
-
We've got one word for it, and it's usually the wrong one
In this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address...
-
VU#687587: AOMEI Backupper amwrtdrv.sys local privilege escalation vulnerability allows arbitrary writes to physical disks
An incorrect permissions assignment vulnerability in the amwrtdrv.sys kernel driver, included with AOMEI Backupper 8.4.0, allows an unprivileged local user to perform arbitrary writes to the physic...
-
WebPros security advisory (AV26-908)
Serial number: AV26-908Date: September 10, 2026 As of September 10, 2026, WebPros is affected by vulnerabilities in the following products: cPanel & WebHost Manager (WHM) software Pri...
-
CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library
Bulletin ID: 2026-106-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/10/2026 10:00 AM PDT Description: Deep Java Library (DJL) is an open-source, engine-agnostic J...
-
Adobe security advisory (AV26-808) – Update 2
Serial number: AV26-808Date: August 12, 2026Updated: September 24, 2026 As of August 11, 2026, Adobe is affected by vulnerabilities in the following products: Prior to or equal to ACC v7:...
Cybersecurity 2 versions -
The future of infrastructure resiliency starts with modernization
Modernization only succeeds when organizations have confidence that their infrastructure can withstand disruption and continue supporting critical operations. The post The future of infrastruc...
-
Credential Theft: How Attackers Steal & Use Stolen Credentials
Learn what credential theft is, how attackers steal credentials, and how to prevent credential-based attacks with identity-focused defenses from Huntress.
Cybersecurity 3 versions -
BlueMoon exploit kit turns Chrome and Windows flaws into attacks
Four different espionage groups used the same exploit kit to target recently fixed flaws, showing why “patch later” is a dangerous gamble.
-
Best Practices for Good Endpoint Hardening | Huntress
Learn what endpoint hardening is, why it matters, and best practices to reduce attack surface, control access, & stop common intrusion paths.
Cybersecurity 3 versions -
PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector
Executive Summary In this research we introduce a prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A polic...
-
[Control systems] Advantech security advisory (AV26-907)
Serial number: AV26-907Date: September 10, 2026 As of September 10, 2026, Advantech is affected by vulnerabilities in the following product: Advantech WISE-6610 industrial gateway Multipl...
-
Google je izdao zakrpe za 230 ranjivosti. Ažurirajte Chrome preglednik.
Google je objavio sigurnosno ažuriranje kojim se otklanja ukupno 230 ranjivosti, među kojima se nalazi i ranjivost nultog dana Chrome preglednika koja se aktivno iskorištava u napadima. Google je p...
Announcement Cybersecurity -
35 Actionable Password Statistics for Businesses in 2026 | Huntress
The top password statistics might surprise you. Learn how common poor password hygiene is, plus tips to better protect your precious credentials.
Cybersecurity 3 versions -
The 20 Most Common Passwords Hackers Target in 2026
See this year's most common passwords, why they're so easy to crack, and how a stronger password (or passphrase) habit keeps your accounts protected.
Cybersecurity 3 versions -
The agentic harness for Tenable Hexa AI: How Tenable prevents AI agents from going off the rails
Learn why Tenable treats agentic LLMs as untrusted insiders, and how we’ve made sure you can control and monitor the AI agents making changes in your production security environment AI models can q...
Cybersecurity 2 versions -
1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
1.1.1.1 now validates DNSSEC signatures using NIST’s post-quantum ML-DSA-44 algorithm. Here is how we manage 2,420-byte signatures and downgrade risks at scale.
-
Fortra security advisory (AV26-906)
Serial number: AV26-906Date: September 10, 2026 As of September 9, 2026, Fortra is affected by a vulnerability in the following product: GoAnywhere MFT Endpoint Prior to 7.10.2 The Cyber ...
-
Palo Alto Networks security advisory (AV26-905)
Serial number: AV26-905Date: September 10, 2026 As of September 10, 2026, Palo Alto Networks is affected by vulnerabilities in the following products: Cloud NGFW All on AWS*, All on Azure...
-
Patchtisdag september 2026 – samlad information om månadens säkerhetsuppdateringar
Flera leverantörer har släppt sina månatliga säkerhetsuppdateringar för september. Microsofts säkerhetsuppdateringar omfattar 973 sårbarheter varav 113 klassade som kritiska. Det är den i särklass ...
Announcement Cybersecurity -
Konferenca Krepitev ekosistema kibernetske varnosti v Sloveniji 2026
Konferenca 'Krepitev ekosistema kibernetske varnosti v Sloveniji 2026' bo potekala 24. novembra 2026 na Brdu pri Kranju. Namenjena bo izmenjavi izkušenj, predstavitvi konkretnih rešitev in dobrih p...
Announcement Cybersecurity -
Podatność w oprogramowaniu drEryk Gabinet
Zaszyte w kodzie poświadczenia (CVE-2026-17038) zostały wykryte w oprogramowaniu drEryk Gabinet.
Announcement Cybersecurity -
The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE
Learn how root access on a compromised K8s node allows attackers to utilize SPIFFE/SPIRE metadata to spoof and harvest co-located workload identities. The post The Machine With Many Faces: Post-Exp...
-
Kritieke kwetsbaarheden in Check Point VPN-producten actief misbruikt: update nu
Er zijn 2 kritieke kwetsbaarheden in Check Point VPN-producten, met de kenmerken CVE-2026-85102 en CVE-2026-85103. Het gaat om 2 ernstige kwetsbaarheden met een CVSS-score van 9,8. Het NCSC beoorde...
Cybersecurity 2 versions -
Kritiska ievainojamība Check Point kiberdrošības produktos
Check Point ir publicējis brīdinājumus par 2 kritiskām ievainojamībām CVE-2026-85102 un CVE-2026-85103 (abas ievainojamības ar CVSS vērtējumu 9.8), kas ietver produktus Security Gateway, Security M...
Announcement Cybersecurity -
European Commission launches Security Research and Innovation Campus
The Campus is a key element of the ProtectEU Internal Security Strategy, and it will help the EU and Member States respond to a rapidly evolving security environment and hybrid threats.
Announcement Cybersecurity -
JRC launches Security Research and Innovation Campus
The Campus brings together Europe's security community to test technologies and deploy them swiftly.
Announcement Cybersecurity -
GuardBreaker: Derailing AI-assisted malware analysis with a code comment
LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor
-
What Is ISPM? How It Differs from IAM, PAM, IGA, and IDaaS
Key Takeaways Identity Security Posture Management (ISPM) is the continuous risk and posture layer of the identity stack not a replacement for Identity and Access Management (IAM), Privileged Acces...
-
Risolte vulnerabilità in prodotti Check Point
Check Point ha rilasciato aggiornamenti di sicurezza che risolvono 2 vulnerabilità con gravità "critica" che interessano Security Gateway, Security Management e Spark Firewall, soluzioni dedicate a...
Advisory Cybersecurity -
Kritiska ievainojamība Microsoft Windows operētājsistēmās
Microsoft brīdina par kritisku ievainojamību CVE-2026-69730 (CVSS vērtējums - 9.8) Windows DNS implementācijā, kas iekļauta Microsoft izstādātajās operētājsistēmās: Windows 10 un Windows Server. Uz...
Announcement Cybersecurity -
2026-012: Critical Vulnerabilities in Check Point Products
On 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall d...
Advisory Cybersecurity -
Kwetsbaarheden in Adobe Illustrator met risico op code-uitvoering: update onmiddellijk
Er zijn 3 kwetsbaarheden gevonden in Adobe Illustrator. Deze kwetsbaarheden hebben een CVSS-score van 7,8 tot 8,6 en zijn beoordeeld als medium kans op misbruik en hoge mogelijke schade. Ze maken h...
-
AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
An AD RMS Service Group account exports the AD RMS Server Licensor Certificate private key. That 1172-byte key decrypts every document the deployment ever protected, offline, and keeps doing so aft...
Cybersecurity 3 versions -
CVE-2026-18954 - Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server
Bulletin ID: 2026-076-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/05/2026 13:00 PM PDT Description: Amazon DocumentDB MCP Server is an open-source Model Context...
Security notice Cybersecurity