SmarterTools has addressed two more security flaws in SmarterMail email software, including one critical security flaw that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-24423, carries a… Read More »SmarterMail Fixes Critical Unauthenticated RCE Flaw with CVSS 9.3 Score
A former Google engineer accused of stealing thousands of the company’s confidential documents to build a startup in China has been convicted in the U.S., the Department of Justice (DoJ)… Read More »Ex-Google Engineer Convicted for Stealing 2,000 AI Trade Secrets for China Startup
Ivanti has rolled out security updates to address two security flaws impacting Ivanti Endpoint Manager Mobile (EPMM) that have been exploited in zero-day attacks, one of which has been added… Read More »Two Ivanti EPMM Zero-Day RCE Flaws Actively Exploited, Security Updates Released
A new joint investigation by SentinelOne SentinelLABS, and Censys has revealed that the open-source artificial intelligence (AI) deployment has created a vast “unmanaged, publicly accessible layer of AI compute infrastructure”… Read More »Researchers Find 175,000 Publicly Exposed Ollama AI Servers Across 130 Countries
This week’s updates show how small changes can create real problems. Not loud incidents, but quiet shifts that are easy to miss until they add up. The kind that affects… Read More »ThreatsDay Bulletin: New RCEs, Darknet Busts, Kernel Bugs & 25+ More Stories
A study by OMICRON has revealed widespread cybersecurity gaps in the operational technology (OT) networks of substations, power plants, and control centers worldwide. Drawing on data from more than 100… Read More »Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps
Beyond the direct impact of cyberattacks, enterprises suffer from a secondary but potentially even more costly risk: operational downtime, any amount of which translates into very real damage. That’s why… Read More »3 Decisions CISOs Need to Make to Prevent Downtime Risk in 2026
SolarWinds has released security updates to address multiple security vulnerabilities impacting SolarWinds Web Help Desk, including four critical vulnerabilities that could result in authentication bypass and remote code execution (RCE).… Read More »SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass
Google on Wednesday announced that it worked together with other partners to disrupt IPIDEA, which it described as one of the largest residential proxy networks in the world. To that… Read More »Google Disrupts IPIDEA — One of the World’s Largest Residential Proxy Networks
Cybersecurity researchers have flagged a new malicious Microsoft Visual Studio Code (VS Code) extension for Moltbot (formerly Clawdbot) on the official Extension Marketplace that claims to be a free artificial… Read More »Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware