Lucian Constantin

The critical remote code execution vulnerability was added to CISA's KEV, with more than 15,000 deployments potentially at risk.

More than 80,000 proxy servers have been observed cloaking the origin of traffic to frontier models, likely using AI credentials harvested via information stealers, phishing campaigns, and supply-chain attacks.

AI is having a double impact in 2026, contributing to the rapid rise in vulnerability discovery and a concurrent surge in exploits crafted against known flaws.

IT leaders in sectors dependent on OT and IoT devices face an uphill battle to protect the data that flows through them from ‘harvest now, decrypt later' and other quantum threats.

PwnEscape, a flaw that involves checksum offloading, originates in the Linux host's IPv4 networking subsystem. Researchers warn that similar bugs could exist elsewhere in the networking stack.

PHP's bundling into third-party products, LTS Linux distros, pre-built containers, virtual machines, and firmware images mean the real enterprise battle is more than just the vulnerability but a question of visibility and the viability of an upstream fix.

IBM has released patches for the popular low-code AI agent workflow framework and its request routing and backend service Hono.

The company's initial report raises a number of questions about its security policies, controls, and awareness training, as well as how it governs internal AI tooling — a key lesson for CISOs.

The trivial exploit involves sending an arbitrary extra-long password to an OpenSSH server running on a vulnerable Linux configuration, including the popular Alpine Linux.

Exploitation attempts have already been detected against the RMM platform, which has been under attack several times in recent months for a variety of vulnerabilities.