VulnerabilitiesA critical vulnerability in NASA/JPL's AIT-GUI allows unauthenticated access to commands and scripts, posing high risks. Fix available in version 2.5.2.
VulnerabilitiesDiscover how Windows named pipes can be exploited for privilege escalation and key security practices to mitigate risks.
VulnerabilitiesCisco fixes nine critical vulnerabilities in Crosswork and Secure Workload, with CVSS scores up to 10.0, requiring immediate updates. No workarounds available.
VulnerabilitiesBTR Reforged: Abusing Defender's driver to bypass Windows security. Requires admin access, affects Windows 7-11. Presented at Black Hat 2026.
VulnerabilitiesCISA adds Ray vulnerability CVE-2025-62593 to KEV catalog due to active exploitation targeting AI development environments. Learn about the flaw and remediation.
VulnerabilitiesDiscover a critical vulnerability in isolated-vm that enables host RCE by breaking JavaScript sandbox boundaries.
VulnerabilitiesMicrosoft fixes critical CVE-2026-69836 in Entra ID, fully mitigated. No patches needed. Exploited in attacks but resolved.
VulnerabilitiesCritical GitLab vulnerability CVE-2026-19478 actively exploited within days. Updates required for CE and EE versions to prevent code injection attacks.
VulnerabilitiesAtlassian and Splunk release security updates fixing over 250 flaws in products like Jira, Confluence, and Splunk Enterprise, focusing on third-party dependencies.