Vulnerabilities

Threat actors are targeting CVE-2026-41089, a critical Windows Netlogon vulnerability that could enable unauthenticated remote code execution.

CBSE has launched a security audit after researchers flagged an OSM vulnerability affecting the Class 12 board exam evaluation system.

A WP Maps Pro vulnerability exposed WordPress sites to administrator account creation attacks through a vulnerable AJAX action.

Notepad++ version 8.9.6.1 fixes CVE-2026-48778 and other flaws that could allow RCE attacks through malicious configuration files.

CVE-2026-26980 allowed attackers to exploit Ghost CMS sites and inject malicious JavaScript across 700+ compromised websites.

Megalodon supply chain attack compromised 5,500+ GitHub repos using malicious GitHub Actions workflows to steal CI/CD secrets and cloud credentials.

TCE weekly roundup covers cybersecurity threats, AI misuse, supply chain attacks, and global incidents shaping today’s evolving cyber risk landscape.

The report stressed that organizations need clearer governance policies around AI usage as adoption continues accelerating across workplaces.

Microsoft confirms active exploitation of CVE-2026-41091 and CVE-2026-45498 in Defender, raising CVSS-based risks and urgent KEV listing concerns.

Cisco addressed CVE-2026-20223, a CVSS 10.0 Secure Workload REST API vulnerability linked to CWE-306 authentication failures.