​Enterprise defenses are tuned to catch the attacks that make noise. This year’s data shows attackers winning by making none. According to Picus Labs’ new Blue Report 2026, which measured… Read More »Enterprise Defenses Recovered at the Edge and Collapsed Inside

​A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and secrets from session logs, including API… Read More »OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning

​Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation. The… Read More »Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

​Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 (CVSS… Read More »Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

​Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets… Read More »Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

​Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The high-severity… Read More »Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

​The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted… Read More »ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

​SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231,… Read More »SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

​Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter’s. The flaw sat in… Read More »Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client