Follow the cybersecurity developments that matter, explained in about five minutes each weekday.
Zimbra CVE-2026-73570 exploited, GitLab CVE-2026-19478 attacked within days, CISA warns on MLflow CVE-2026-64849, and Talos on UAT-10147's AI-assisted intrusions....
CISA ties Windows Task Host CVE-2025-60710 to ransomware, Clop's Windchill web shell, MLflow SSRF used to steal cloud credentials, and…
ShieldBreak still unpatched, GitLab fixes critical CVE-2026-19478, Pokémon Center data exposed via CEVA, Microsoft on DeadLock ransomware, and August's network…
Microsoft prepares a fix for Defender zero-day ShieldBreak, SAP Commerce Cloud CVE-2026-58231 targeted days after patch, and August's critical DNS,…
Lazarus uses a Windows zero-day against defense firms, Microsoft patches LegacyHive, SharePoint CVE-2026-55040 attacked after PoC, vCenter flaw used for…
Lazarus used AFD.sys zero-day CVE-2026-68820 against defense firms, CrowdStrike and Talos break down August Patch Tuesday, and federal KEV deadlines…
August Patch Tuesday fixes exploited AFD.sys CVE-2026-68820, CISA adds three KEV entries, Cisco ASA/FTD DoS flaw exploited, and Rapid7's AI-assisted…
CISA ties SharePoint CVE-2026-45659 to ransomware, LoadMaster joins KEV, OpenAI launches GPT-5.6-Cyber, the ChainDrop npm worm, and a joint advisory…
Metabase SQL injection zero-day used in data theft, LoadMaster CVE-2026-8037 joins KEV, Head Mare trojanizes TrueConf installers, and Talos on…
The cybersecurity developments that matter most today, explained in about five minutes....
CISA warns on exploited Langflow, N-central and Tomcat flaws, khunt toolkit runs inside Oracle, water-sector PLC attacks, OVSwrap Linux root…
ChainDrop npm worm hits keyv packages, TP-Link fixes 15 Omada provisioning flaws, CISA warns water utilities about PLC attacks, Defender…
Malware can abuse Google Password Manager passkeys on Windows, INC Ransomware leads SonicWall SMA 1000 attacks, DOUBLECUP ClickFix loader, CaptiveCrunch…
