Daily briefings on critical security disclosures, vulnerabilities, and threat intelligence.
A critical Time-of-Check Time-of-Use flaw (CVE-2026-0132) in the NVIDIA Container Toolkit allows attackers to escape container isolation via crafted images, granting root-level file access and arbitrary host command execution via runtime Unix sockets.
Read briefing →HPE Aruba Networking released security patches for three critical vulnerabilities (CVE-2026-42505, CVE-2026-42506, and CVE-2026-42507) in the CLI service of its access points, allowing unauthenticated attackers to achieve remote code execution via crafted UDP port 8211 packets.
Read briefing →A four-vulnerability exploit chain in OpenPrinting CUPS allows remote unauthenticated attackers to execute arbitrary commands under lp privileges by sending crafted UDP packets to exposed cups-browsed daemons on Linux systems.
Read briefing →Microsoft disclosed a sophisticated campaign by ransomware operator Storm-0501 pivoting from on-premises Active Directory to Microsoft Entra ID, weaponizing AADInternals for backdoor federation and deploying Embargo ransomware alongside cloud data destruction.
Read briefing →Progress Software released urgent updates for WhatsUp Gold resolving multiple critical flaws, including unauthenticated remote code execution bugs CVE-2026-8785 and CVE-2026-46909 in NmAPI.exe that allow system takeover.
Read briefing →Cloud hosting provider Rackspace confirmed threat actors exploited a zero-day remote code execution vulnerability (CVE-2026-9537) in a bundled third-party utility within the ScienceLogic SL1 monitoring platform to breach internal servers and steal customer infrastructure data.
Read briefing →Money transfer giant MoneyGram has confirmed that a cyberattack caused a multi-day worldwide service outage, forcing the firm to take core transaction processing networks offline and initiate incident response across its global transfer ecosystem.
Read briefing →Multiple infostealer malware syndicates including Lumma and StealC have developed working bypasses against Google Chrome's App-Bound Encryption feature, subverting Windows SYSTEM service protections to extract decrypted session cookies and credential databases under standard user privileges.
Read briefing →A new variant of the Necro Trojan infected over 11 million Android devices via compromised advertising SDKs in Google Play applications, using steganographic payload delivery and dynamic DEX class loading to execute background ad fraud, proxy tunneling, and unauthorized subscriptions.
Read briefing →CISA has ordered federal agencies to urgently patch an actively exploited stack-based buffer overflow flaw (CVE-2026-7273) in Zyxel GS1900 series switches, which unauthenticated threat actors are weaponizing to execute arbitrary OS commands and exfiltrate credentials from enterprise networks.
Read briefing →