Technology ❯ Information Security

Incident Response

Vulnerability Management Threat Detection Threat Intelligence Patch Management Threat Actors Product Security Incident Response Team Data Protection Data Breach Management Forensics Threat Analysis

Metabase Zero-Day Used to Gain Admin Access and Steal Customer Data

The flaw lets unauthenticated attackers seize administrator control of instances, exposing stored credentials and connected databases.

BTCPay Server Releases Emergency Patch as Critical Flaw Is Actively Exploited

Arista Patches Actively Exploited CVE-2026-16812 in VeloCloud Orchestrator

Public Proof‑of‑Concept Released for Certighost AD CS Flaw

Race-Condition Bug in snap-confine Lets Local Users Gain Root on Ubuntu Desktop

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Attackers Exploit Critical ServiceNow RCE Flaw

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

HollowByte Causes Persistent Memory Bloat in OpenSSL, Patch Available

Microsoft Revokes 11 Old Signed UEFI Shims That Could Bypass Secure Boot

Progress Issues Patch After Zero-Day Forces ShareFile Storage Zone Shutdown

Peru Schedules National Cyberattack Drill for July 16

KDDI Says Up to 14.2 Million Email Accounts May Be Exposed in Major Breach

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

CrowdStrike and Google Disrupt Glassworm Botnet Targeting Developers

OpenAI Orders Mac App Updates After TanStack Supply-Chain Breach Exposes Signing Certificates

GitHub Patches Critical Git Push RCE as Wiz Warns Most Enterprise Servers Remain Exposed

Itron Discloses Cyber Intrusion on Corporate IT Systems