Atlassian and Splunk this week announced patches for over 250 vulnerabilities across their products, including dozens of critical- and high-severity flaws. On Tuesday, Atlassian published…
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 20, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds…
Artificial intelligence has never been more important to the federal government. Under the Trump administration, AI has been adopted rapidly across the private sector and…
“There are no public indicators that these two new flaws are being exploited at the moment, but that is likely to change within hours, given…
As firewall rule sets grow in complexity, security teams face a common challenge: manual log analysis is used to determine which rules are actively matching…
= trending up from previous month= trending down from previous month = no change in rank from previous month *Denotes a tie Four fresh faces:…
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server. Identified as…
Enterprises are racing to deploy AI agents that pull from databases, document repositories, SaaS platforms, and internal knowledge bases to automate workflows. But a quiet…
Black Hat 2026 Series Introduction — Cyber Defense Magazine By Dr. Arun Lakhotia Black Hat 2026: The Supply-Chain Trust Series. This is the series home. It…
Cyber security has become one of the most audited and regulated areas of enterprise technology. Yet an organisation can satisfy every requirement on paper and…
Security researchers Tom Stacey from PortSwigger and Tobia Righi from TurtleSec have introduced a new category of HTTP request smuggling attacks known as “CRLF-Powered Desync…
A malicious executable masquerading as a Google Gemini installer was used to deliver the Vidar infostealer on a company network in the EMEA region, according…
