Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
171 articles
CVE-2026-10520 and CVE-2026-10523 are critical vulnerabilities in Ivanti Sentry enabling remote root code execution; no exploitation reported, but immediate patching is required.
CVE-2026-42271 (CVSS 10.0, critical) enables command injection in BerriAI LiteLLM, and is being actively exploited in the wild. Immediate patching is required to prevent unauthenticated remote code execution via a chained Starlette flaw (CVE-2026-48710).
CVE-2026-50751 is a critical authentication bypass in Check Point VPN/firewall appliances, exploited since May 2026 for ransomware attacks. Immediate patching is required to prevent unauthorized VPN access.
CISA confirms active exploitation of the CVE-2026-28318 DoS vulnerability in SolarWinds Serv-U servers, urging federal agencies and enterprises to patch by June 19, 2026. This cybersecurity report details the risk and response.
CrowdStrike and NVIDIA have joined forces to scale AI-native agents that transform vulnerability management. CISOs gain rapid, prioritized risk reduction at enterprise scale.
CrowdStrike has been recognized as a leader in identity threat detection and response for 2026 by Frost & Sullivan and GigaOm, highlighting its innovative Falcon platform. This cybersecurity report outlines why CISOs must prioritize continuous identity security to counter modern cyber threats.
Cisco refines its vulnerability disclosure strategy to prioritize high-risk issues amid AI-driven acceleration in detections. CISOs must adapt to evolving disclosure practices.
CrowdStrike uncovered significant security vulnerabilities in AI-generated code linked to politically sensitive prompts in Chinese AI models. CISOs must evaluate AI coding tools to mitigate emerging threats.
Mozilla’s Firefox 151 brings substantial privacy upgrades including stronger anti-fingerprinting and local network access controls, alongside crucial security fixes. CISOs should prioritize patching to mitigate emerging threat vectors.
Microsoft is revising its Edge browser’s password management to avoid storing all credentials as plaintext in memory at startup, improving protection against memory scraping attacks.
Linux kernel maintainers have proposed a kill switch feature that allows disabling vulnerable functions temporarily before patches are deployed, triggering extensive debate on operational risks and benefits. CISOs must evaluate this new tool's potential impact on enterprise security posture.
A newly disclosed Linux kernel vulnerability allows trivial local privilege escalation, threatening multi-tenant and containerized environments. CISOs must act swiftly to monitor and patch critical systems.