Follow the cybersecurity developments that matter, explained in about five minutes each weekday.
Lazarus uses a Windows zero-day against defense firms, Microsoft patches LegacyHive, SharePoint CVE-2026-55040 attacked after PoC, vCenter flaw used for…
Lazarus used AFD.sys zero-day CVE-2026-68820 against defense firms, CrowdStrike and Talos break down August Patch Tuesday, and federal KEV deadlines…
August Patch Tuesday fixes exploited AFD.sys CVE-2026-68820, CISA adds three KEV entries, Cisco ASA/FTD DoS flaw exploited, and Rapid7's AI-assisted…
CISA ties SharePoint CVE-2026-45659 to ransomware, LoadMaster joins KEV, OpenAI launches GPT-5.6-Cyber, the ChainDrop npm worm, and a joint advisory…
Metabase SQL injection zero-day used in data theft, LoadMaster CVE-2026-8037 joins KEV, Head Mare trojanizes TrueConf installers, and Talos on…
The cybersecurity developments that matter most today, explained in about five minutes....
CISA warns on exploited Langflow, N-central and Tomcat flaws, khunt toolkit runs inside Oracle, water-sector PLC attacks, OVSwrap Linux root…
ChainDrop npm worm hits keyv packages, TP-Link fixes 15 Omada provisioning flaws, CISA warns water utilities about PLC attacks, Defender…
Malware can abuse Google Password Manager passkeys on Windows, INC Ransomware leads SonicWall SMA 1000 attacks, DOUBLECUP ClickFix loader, CaptiveCrunch…
CISA lists Cisco FMC CVE-2026-20316 in KEV, the Siemens ROX II root chain, XCSSET v40 targets Xcode developers, Rails CVE-2026-66066,…
CISA adds Cisco FMC CVE-2026-20316 to KEV, Broadcom fixes five VMware flaws, Unit 42 on XCSSET v40, and Sophos tracks…
Cisco FMC credential flaw CVE-2026-20316 exploited as a zero-day, Rails Active Storage CVE-2026-66066 exposes server secrets, a worldwide Claude outage,…
CISA adds FortiOS CVE-2025-68686 to KEV, Rapid7 releases a Check Point CVE-2026-16232 PoC, Talos on 622-CVE Patch Tuesday, and OpenAI…
