VulnerabilitiesZimbra Under Attack: Command Injection Exploited in the Wild, CISA Mandates Patch
CISA mandates patch for critical Zimbra command injection vulnerability CVE-2026-73570 exploited in the wild. Update to version 10.1.20 immediately.
/// Cyber Security · Threat Intelligence · CVE
Latest news — Page 17
More news
Page 17 / 48 · 429 articlesVulnerabilities
VulnerabilitiesWindows 11: Microsoft publishes a workaround for game crashes caused by the August update
Microsoft publishes a registry workaround to fix Windows 11 game crashes caused by the August update KB5121003, affecting RGB drivers.
VulnerabilitiesThe race for post‑quantum hardware: Intel, Nvidia, and IBM prepare chips that resist quantum computers
Intel, Nvidia, IBM develop post-quantum chips to counter quantum threats. Learn about harvest-now-decrypt-later attacks, NIST standards, and hardware transition.
APTSilkParasite: AI-Assisted Malware and Economic Espionage in Central Asia
SilkParasite: AI malware targeting Central Asia's economic institutions via spearphishing and Google Drive. Linked to Chinese espionage campaigns.
Cloud SecurityPasskeys used as backdoor: iAuthFlow V2, the phishing that survives password change
Learn about iAuthFlow V2, a phishing toolkit using passkeys to keep account access after password changes, evading standard defenses.
Cloud SecurityMicrosoft patches 22 flaws: Entra ID already secured, but ShieldBreak remains unpatched
Microsoft updates 22 security flaws: Entra ID fixed, but ShieldBreak zero-day in Defender still unpatched. Cloud vulnerabilities mostly server-mitigated.
VulnerabilitiesRobots manipulated via a factory network: the TSN flaw that shatters synchronization
TSN flaws enable attackers to manipulate industrial robots and disrupt OT synchronization, posing severe risks to factory networks.
MalwareAI-Assisted Attacks on Siemens S7 PLCs: NSA, CISA, and FBI Alert for Critical Infrastructure
NSA, CISA, and FBI warn of ongoing AI-powered attacks on Siemens S7 PLCs in critical infrastructure. Get details on threats, mitigations, and detection.
AICryptographic Context Injection: The Technique That Drains Grok's Chat History Without a Click
Explore the Cryptographic Context Injection attack that drains Grok's chat history and exposes Gemini, using AES-256-GCM encryption to bypass AI safeguards.