Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Cisco ISE: Emergency Patch for Actively Exploited Zero-Day with CVSS 10
Cisco has released urgent patches for CVE-2026-76460, an authentication bypass with a maximum CVSS 10.0 score in Cisco Identity Servic…
Cisco FMC Under Fire: 9.8 Bug Opens Management Center to Unauthenticated RCE
On September 16, 2026, Cisco released a patch for CVE-2026-20242, a critical vulnerability in Secure Firewall Management Center that e…
GIMP Under Attack: APNG Buffer Overflow Enables Remote Code Execution
The ZDI-26-713 vulnerability in GIMP allows RCE via malicious APNG files. CVSS 7.8, patch available after 140 days of coordinated disc…
MindsDB Exposed to 0-Day RCE: OpenBBtable Class Executes Python Code Without Validation
ZDI-26-707 (CVE-2026-92207, CVSS 8.8) enables remote code execution on MindsDB via Python injection in the OpenBBtable class. The vend…
A Quote in a Folder Name Opens Root on Mac: The Parallels Bug
CVE-2026-90894: The most widely used virtualization software on Mac runs a root daemon with a world-writable socket. The fix lands in…
TP-Link Tapo C200: Two Zero-Days Allow Video Feed Access for Adjacent Attackers
OPSWAT disclosed two zero-day vulnerabilities in the TP-Link Tapo C200 camera that break local authentication. An attacker with adjace…
Google Patches Actively Exploited Android Zero-Day on Pixel: 110 Flaws Fixed
Google released the September 2026 Pixel security bulletin addressing 110 vulnerabilities. CVE-2026-58704, a zero-day in the Cellular…
Active WSO2 API Manager Exploit: JWT Bypass with Forged Admin Tokens
CVE-2026-5430, a critical vulnerability in the JWT component of WSO2 API Manager, is under active exploitation. Forged tokens with adm…
Google Workspace Attacks Now Start With OAuth, Not Email
The Google Workspace attack chain has shifted from email-first to OAuth-first. Stolen OAuth tokens survive password resets, never expi…
Ransomware Recovery in 24–48 Hours Remains Out of Reach: 4 Cases Out of 800+
Fenix24's State of Recoverability 2026, based on 500+ ransomware recoveries, shows only 0.5% of clients neared their 24–48 hour restor…
Zero-Day Time Compressed to Hours: The Patch-Exploit Model No Longer Holds
Claude Mythos has collapsed discovery-to-exploit timelines. For CISOs, the only option left is breaking the attack chain before a work…
Luciferus: The AI Service Killing Jailbreaks in Cybercrime
Sophos researchers have uncovered Luciferus, a subscription-based service sold on underground hacking forums that generates malware vi…