Critical Heap Buffer Overflow in NGINX Allows Unauthenticated Remote Code Execution
A critical vulnerability (CVE-2026-42533, CVSS v4.0 9.2 / CVSS v3.1 8.1) was disclosed affecting NGINX Open Source and NGINX Plus,...
A critical vulnerability (CVE-2026-42533, CVSS v4.0 9.2 / CVSS v3.1 8.1) was disclosed affecting NGINX Open Source and NGINX Plus,...
A critical vulnerability (CVE-2026-11386, CVSS 9.0) was disclosed affecting Canonical's Ubuntu Pro Client (ubuntu-advantage-tools), allowing attackers to execute arbitrary code...
Worldwide spending on AI continues to surge as organizations of all sizes embed AI into their cloud environments. Yet capturing...
Microsoft's July 2026 Patch Tuesday is the largest in the company's history, addressing 622 CVEs across Windows, Office, Azure, SharePoint,...
Today, we're releasing the 2026 State of AI Security Report, a comprehensive analysis of how artificial intelligence has moved from...
A critical vulnerability (CVE-2026-48282, CVSS 10.0) was disclosed affecting Adobe ColdFusion, allowing attackers to achieve full remote code execution via...
A critical credential-harvesting campaign dubbed “FortiBleed” has been exposed, systematically targeting over 430,000 FortiGate firewalls worldwide and exploiting CVE-2026-35616 (CVSS...
A critical vulnerability (CVE-2026-33017, CVSS 9.8) was disclosed affecting Langflow, a widely used open-source AI application builder, allowing attackers to...
A critical supply chain attack was disclosed affecting the entire @mastra/* npm scope, allowing attackers to deploy a cross-platform infostealer...