What ensures NHI are protected in cloud platforms
What Makes Non-Human Identities Critical for Cloud Security? Have you considered how organizations can effectively secure their digital assets in...
critical
Security Researchers Breach Moltbook in Record Time
Security researchers from cloud cybersecurity firm Wiz disclosed a critical vulnerability in Moltbook, a newly launched social network designed for...
How secure are secrets vaults in cloud environments
Are You Overlooking Non-Human Identities in Cloud Security? Machine identities have emerged as critical components that require immediate attention and...
SmarterTools patches critical SmarterMail flaw allowing code execution
SmarterTools patches critical SmarterMail flaw allowing code execution Pierluigi Paganini January 30, 2026 SmarterTools fixed two SmarterMail flaws, including a...
SolarWinds addressed four critical Web Help Desk flaws
SolarWinds addressed four critical Web Help Desk flaws Pierluigi Paganini January 29, 2026 SolarWinds patched six Web Help Desk vulnerabilities,...
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code Execution
Ravie LakshmananJan 28, 2026Vulnerability / Open Source A critical sandbox escape vulnerability has been disclosed in the popular vm2 Node.js...
Pwn2Own: Researchers Earn $1 Million for 76 Zero-Days
Discovering critical vulnerabilities across connected vehicles, EV chargers, and automotive systems As connected cars proliferate worldwide, data security for vehicles...
Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet Formulas
Ravie LakshmananJan 27, 2026Vulnerability / Cloud Security A critical security flaw has been disclosed in Grist‑Core, an open-source, self-hosted version...
Imperva Customers Protected Against CVE-2026-21962 in Oracle HTTP and WebLogic
What Is CVE-2026-21962? CVE-2026-21962 is a critical (CVSS 10.0) vulnerability in the Oracle HTTP Server and the WebLogic Server Proxy...
New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector
Ravie LakshmananJan 24, 2026Malware / Critical Infrastructure The Russian nation-state hacking group known as Sandworm has been attributed to what...
11-Year-Old critical telnetd flaw found in GNU InetUtils (CVE-2026-24061)
11-Year-Old critical telnetd flaw found in GNU InetUtils (CVE-2026-24061) Pierluigi Paganini January 24, 2026 Critical telnetd flaw CVE-2026-24061 (CVSS 9.8)...
Agentic AI Exposes New Cybersecurity Risks for Enterprises
A new era of digital finance is emerging as the intersection of artificial intelligence and cybersecurity becomes increasingly critical. In...
Critical SmarterMail vulnerability under attack, no CVE yet
Critical SmarterMail vulnerability under attack, no CVE yet Pierluigi Paganini January 22, 2026 A SmarterMail flaw (WT-2026-0001) is under active...
Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access
Ravie LakshmananJan 22, 2026Vulnerability / Linux A critical security flaw has been disclosed in the GNU InetUtils telnet daemon (telnetd)...
Zoom and GitLab Patch RCE, DoS, and 2FA Bypass Vulnerabilities
Image: Unsplash Two of the world’s most critical business platforms just dropped emergency security patches that could prevent complete network...
