OpenAI plans a new AI-powered security sprint with outside researchers and raises bug bounty rewards to nearly $172,000 for exceptional critical flaws.
Gorbag Hackers Exploit WinRAR Vulnerability to Steal Credentials From Ukrainian Government Agencies
Russia-aligned hackers tracked as Gorbag are exploiting a WinRAR vulnerability to steal browser credentials, VPN configurations, and sensitive documents…
Chrome 157 patches 213 flaws including 7 critical
Google has released Chrome version 157 to its stable channel for Windows, Mac, Linux, and Android, addressing 213 security vulnerabilities including seven…
Critical Barracuda Security Flaws Could Let Hackers Bypass Authentication and Gain Root Access
Barracuda has disclosed two security vulnerabilities that could allow attackers to bypass authorization controls and gain root access to affected…
CVE-2026-105811 – Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Read this article Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Critical SolarWinds Dameware Flaw Could Allow Attackers to Compromise Remote Systems
SolarWinds has warned about a critical command injection flaw in its Dameware remote support software. It is tracked as CVE-2026-28336 and carries a…
CVE-2026-116635 – Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Bulletin ID: 2026-164-AWS Publication Date: 11/02/2026 13:30 PM PST Description: We identified CVE-2026-116635. Under certain conditions, improper…
Scammers Use Microsoft Azure to Host Fake Windows Security Alerts Seen at 80 Organizations
Scammers are abusing Microsoft Azure to host fake Windows security alerts that pressure users into calling fraudulent support numbers. Between March and…
7 Best Security Add-Ons for Microsoft Entra in 2026
Compare 7 Microsoft Entra security add-ons for identity verification, privileged access, legacy authentication, hardware-backed keys and directory…
PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three…
Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access
A botnet of more than 1.3 million Android devices, mostly TV set-top boxes, lost control of its servers in late October in a takedown led by Google.…
The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance
Introduction to BOD 26-04 On June 10, 2026, CISA issued Binding Operational Directive 26-04, “Prioritizing Security Updates Based on Risk.” Strip away the…
Thieves pilfer environment variables from Trigger AI workflow tool
So, who’s ready to clear the dust out of that server closet and move things back on-prem?
China-Aligned Group Abuses Sogou Input Method to Deliver Malware
SlippyNunchucks used DNS hijacking to turn Sogou brand promotions into a malware channel
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
The Capytistas, a secretive group claiming more than $1.2 million in backing, started with Elon Musk and Tesla’s board. Members argue that those who buy…
CISA flags WordPress RCE flaw as actively exploited
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert warning that attackers are actively exploiting a recently patched…
Why Pay Twice? One Platform for Enterprise WAF and CDN Speed
Two Teams. Two Priorities. One Application. Application teams want fast, reliable application delivery without disrupting existing cloud native…
Could Nick Andersen’s leadership outlast the clock on his acting role?
He has won praise for his leadership of CISA as acting director, and there’s talk of keeping him in the role beyond his current deadline. With no nominee…
Keeping pace with e-evidence: New report examines Europe’s digital forensic capabilities
Coordinated by the European Commission in cooperation with Europol, the analysis draws on stakeholder consultations, dedicated meetings, surveys and…
Sysdig Adds Runtime Security and Governance for AI Agents
Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.
CVE-2026-119301 – Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component,…
Descope Envoy brings AI agent authentication to consumer apps
Descope has announced Envoy, a set of capabilities that gives personal AI agents a delegated sign-in path alongside a consumer app’s existing…
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through…
Microsoft pushes AI PCs despite rising RAM costs
Microsoft is attempting to reposition AI-capable PCs as essential infrastructure investments rather than routine hardware replacements, urging enterprise…