Every report filed under this tag.
PaperCut has released new regular maintenance updates for its PaperCut NG and PaperCut MF print-management platforms, replacing the emergency patches previously issued to address two vulnerabilities that have been actively exploited in the wild.
A Russia-aligned threat actor has embedded an adversarial prompt inside malicious code to manipulate AI-powered malware analysis systems, attempting to trigger safety protections and prevent automated tools from examining the actual payload.
Threat actors are exploiting vulnerabilities in Cisco Secure Firewall Management Center (FMC) to gain access to enterprise environments, steal credentials and ultimately deploy Qilin ransomware, turning vulnerable security infrastructure into an entry point for broader network compromise.
Threat actors are actively exploiting a critical vulnerability in Cisco firewall software to obtain elevated privileges and deploy malicious payloads, highlighting the growing risk posed by compromised internet-facing security appliances.
A Russian-speaking threat actor has reportedly used hundreds of autonomous AI agents to exploit vulnerable PaperCut NG and MF servers, compromising at least 440 instances belonging to 395 organizations across 48 countries.
Check Point has disclosed two critical vulnerabilities in its Quantum security products that could allow unauthenticated remote attackers to execute arbitrary code by exploiting weaknesses in VPN certificate processing. Both flaws carry a CVSS score of 9.8.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added actively exploited vulnerabilities affecting Cisco, Citrix and Fortinet products to its Known Exploited Vulnerabilities (KEV) catalog.
A previously undocumented exploit kit named BlueMoon has been linked to multiple espionage campaigns targeting Google Chrome and Microsoft Windows.
CVE-2026-82533 carries a 9.4 severity score, and the mechanism is almost embarrassingly simple: the harness decided who to trust by reading a header the caller writes itself. Three weeks before the CVE landed, a developer had already posted a working reproduction on DeepSeek's own discussion board.
Versions v1.7.0 through v1.18.5 are affected, but only where owners exposed the Hub's management interface to the public internet. Alby says one user has been hit; technical details are being withheld for now.
Google confirms attackers are already abusing CVE-2026-87491, a memory-corruption bug in Chrome's JavaScript engine that can be triggered by simply loading a booby-trapped web page.
cPanel has patched a security vulnerability that could allow an authenticated hosting account with mail-related privileges to take complete control of the underlying server.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.