VulnerabilitiesResearchers reveal a prompt injection flaw in Amazon Kiro that exfiltrates workspace data via a single message. Affects IDE versions, patched in update.
VulnerabilitiesCISA reports July 2026 attacks on 100+ US water systems; internet-exposed PLCs via cellular modems were targeted, disrupting operations.
VulnerabilitiesPaperCut NG/MF zero-day flaw actively exploited; all versions at risk. No CVE assigned. Emergency patches released; check for IOCs and restrict web access.
VulnerabilitiesExplore three vulnerabilities in Bendix EC80 brake control units affecting ABS and power steering. Details on CVEs, risks, firmware updates, and protective measures.
VulnerabilitiesUnpatched Kaltura player vulnerabilities CVE-2026-19913 and CVE-2026-19912 allow file read and code execution on shared servers.
VulnerabilitiesSix chained vulnerabilities in WordPress Avada theme allow unauthenticated attackers to take over sites. Update to version 7.16.1 immediately.
VulnerabilitiesCritical RCE in Gitea (CVE-2026-60004) is being exploited for cryptojacking. CISA requires federal agencies to patch by August 28, 2026.
VulnerabilitiesOn August 25, 2026, the Cybersecurity and Infrastructure Security Agency CISA added vulnerability CVE-2026-60004 to the Known Exploited Vulnerabilities
VulnerabilitiesCISA warns of critical vulnerability in Rently Smart Home enabling PIN theft without patch. Affected versions up to 20.1.0.