Cisco addressed CVE-2026-20223, a CVSS 10.0 Secure Workload REST API vulnerability linked to CWE-306 authentication failures.

Researchers uncovered a self-healing INJ3CTOR3 campaign using JOMANGY and ZenharR malware toolkit to compromise FreePBX systems.

Map Protocol MAPO plunged 96% after a bridge exploit minted quadrillion tokens, draining ETH liquidity and exposing major DeFi bridge...

CVE-2026–5140 exposes critical flaws in Pardus Linux, allowing attackers to gain root access without authentication in seconds.

The GitHub cyberattack linked to TeamPCP exposed internal repositories through a malicious VS Code extension compromise.

ChromaDB FastAPI CVE-2026-45829 (ChromaToast) enables pre-auth RCE via HuggingFace model loading before authentication, impacting v1.0.0–1.5.8 risk!!

The Chanhassen Dinner Theatres cyberattack and illness outbreak forced “Guys and Dolls” cancellations and system shutdowns.

The telecom sector formed a private ISAC to improve cyber threat sharing amid rising AI-powered cyberattacks and espionage risks.

Austria foiled 500 cyberattack attempts targeting Eurovision in Vienna as police handled protests and tightened event security.

CVE-2026-42945, dubbed NGINX Rift, is being actively exploited, raising concerns over DoS and possible remote code execution.