[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentCybersecurity
General cybersecurity news and analysis
Researchers Exploit AI Encryption to Steal Proprietary Model Traces
Researchers have made a shocking discovery: they can exploit AI encryption to steal sensitive information, including personal data and login credentials, by decoding encrypted "chain-of-thought" blocks scraped from public repositories. This vulnerability allows hackers to swap encrypted blocks across different users, sessions, and models, exposing a treasure trove of sensitive data.
SAP Discloses Maximum-Severity Kernel Vulnerability
Over 10,000 SAP systems are exposed to the public internet, making them vulnerable to a newly disclosed maximum-severity kernel flaw, CVE-2026-44756, that allows attackers to gain admin privileges and take control. This critical vulnerability, dubbed OVERPASS, is a buffer overflow flaw that can be exploited to run arbitrary commands on vulnerable systems.
LG Smart TVs Collect Extensive User Data, Researchers Warn
LG smart TVs are collecting extensive user data, including audio recordings even when the voice recognition feature is turned off or the TV is on standby, raising serious concerns about privacy invasion. This alarming discovery has experts warning of an egregious breach of personal data.
France Bolsters Cyber Defenses with New Incident Response Unit
France's national cybersecurity agency, ANSSI, has launched REACTIV, a cutting-edge incident response mechanism that swiftly mobilizes expert skills and resources to tackle data breaches alongside concerned ministries. This bold move empowers ANSSI to respond rapidly and effectively to cyber threats, bolstering France's defenses in the digital age.
Chainguard Reaches 1 Billion Build Manifests with AI-Powered Factory Overhaul
Chainguard has achieved a major milestone, processing over 1 billion container build manifests in just six months - a doubling of its output - thanks to a revolutionary AI-powered factory overhaul that enables daily, verifiable rebuilds. This impressive feat reflects a fundamental shift in the company's system, ensuring a constantly updated catalog of fresh, reliable artifacts.
Microsoft Warns of App Crashes on Windows Server 2025
Beware: a recent change in Windows Server 2025's memory management can cause apps to crash, resulting in access violations, memory corruption, or sudden termination. Microsoft is working on a fix, but for now, some applications may be at risk.
FreeIPA Flaw Enables Anonymous Clients to Create Admin Credentials
A critical vulnerability in FreeIPA, tracked as CVE-2026-76578, allows an unauthenticated client to create admin credentials by exploiting a chain of defects that lets them create a Kerberos identity and join the administrators group. This flaw, with a preliminary CVSS score of 9.8, was fixed in FreeIPA version 4.13.4.
Vehicles Cloaked to Evade Flock Camera Surveillance
A recent test has raised eyebrows, showing that a specially designed camouflage can evade detection by Flock cameras and Axon body cameras, sparking questions about the effectiveness of other surveillance technologies. Will upgrades to these systems be enough to catch visually altered vehicles, or will new methods be needed to stay one step ahead?
NCSC Warns of Shadow AI Security Risks
Employees are increasingly turning to AI tools outside of company-approved systems, a phenomenon known as "shadow AI," which poses significant security risks. A staggering 71% of UK employees have already admitted to using unauthorized AI tools at work.
Telerik UI Flaw Exposes Unauthenticated RCE Risk
A newly discovered flaw in Telerik UI for ASP.NET AJAX can be exploited to achieve unauthenticated remote code execution, thanks to a publicly released proof-of-concept that combines an AES-CBC padding oracle with a type-resolution bug in the RadAsyncUpload control. When certain preconditions are met, this vulnerability can be easily leveraged for devastating effect.
Cloud Security Risks Diverge Sharply Across Providers
The cloud security landscape is far from equal, with a staggering 76% of AWS accounts showing exposed services, compared to just 8% on Google Cloud - a massive gap that highlights the limitations of one-size-fits-all cloud security checklists. This stark disparity underscores the need for a tailored approach to cloud security, one that takes into account the unique risks of each provider.
N-able Patches Remote Code Execution Flaw in N-central Platform
A critical vulnerability, CVE-2026-86218, was discovered in N-able's N-central platform, allowing unauthenticated attackers to execute code on the server - and a patch is now available in N-central 2026.3 Hotfix 4. Update now to prevent potential remote code execution attacks!
N-able Rushes Fourth Hotfix for Unauthenticated RCE Flaw in N-central
N-able has urgently released a fourth hotfix in just five weeks to tackle a critical, unauthenticated remote code execution flaw in its N-central software, affecting all on-premises builds prior to version 2026.3.1.14. All users of these outdated versions must apply the latest fix to safeguard against this maximum-severity vulnerability.
ConnectWise Discloses New ScreenConnect Flaw, Offers Mitigations
ConnectWise has uncovered a new vulnerability in its ScreenConnect platform that affects file transfer behavior in Remote Access Support and Access sessions, and is providing temporary mitigations until a patch is released later this week. To protect your systems, apply these manual workarounds now.
Broadcom Patches VMware Flaws That Expose Hosts to Code Execution
Broadcom has patched a critical VMware flaw that lets attackers with local admin access on a virtual machine execute code on the host, thanks to an integer-overflow vulnerability in the VMXNET3 virtual network adapter. This bug, tracked as CVE-2026-59346, earned a near-perfect CVSS score of 9.3, highlighting the severity of the threat.
PostgreSQL Patches 12-Year-Old Flaw Enabling Code Execution
A 12-year-old flaw in PostgreSQL, just patched, allowed replication users to execute arbitrary code on the database server, posing a significant security risk. The vulnerability, tracked as CVE-2026-6471, was exploitable by accounts with the REPLICATION attribute and has been fixed in releases 18.6, 17.11, 16.15, 15.19, and 14.24.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Microsoft Probes Teams Desktop Client Outage on Windows Systems
If you're having trouble launching Microsoft Teams on your Windows device, you're not alone - some users are experiencing loading delays of up to two minutes or being blocked from opening the client altogether. Microsoft is actively working to resolve the issue, which appears when first opening the desktop client.
Passkey Security Compromised by 39 New Attack Methods
The promise of passkey security has been cracked: 39 new attack methods have been uncovered, threatening the layers of protection surrounding modern passkey systems. From phishing to credential theft, these vulnerabilities expose the weaknesses in what was thought to be a foolproof solution.
Cybersecurity Shifts Focus to Human Judgment
As AI takes over the technical heavy lifting in cybersecurity, such as pattern recognition and analysis, human judgment is becoming increasingly crucial in making critical decisions that require experience and contextual understanding. The focus is shifting from technical analysis to informed decision-making, making human expertise more valuable than ever.
OpenAI Bolsters Cybersecurity for Essential Services with $1 Billion AI Subsidy
OpenAI is stepping up to shield essential services from cyber threats with a game-changing $1 billion subsidy, empowering frontline defenders to safeguard complex systems and protect against faster-moving threats. This initiative, Daybreak for Frontline Defenders, will help teams review legacy code, detect vulnerabilities, and develop fixes.
G7 Pushes for Swift Adoption of Quantum-Safe Cybersecurity Measures
The clock is ticking: with quantum computing on the rise, experts warn that it's high time to upgrade your cybersecurity to quantum-safe measures - before it's too late! The G7 is sounding the alarm, urging governments and organizations to take immediate action to protect themselves from this emerging threat.
Plex Issues Urgent Patch for Multiple Undisclosed Flaws
Plex has just released a critical security update to patch multiple undisclosed flaws, urging users to upgrade to Plex Media Server 1.43.3 and Plex Desktop 1.115.0 ASAP to safeguard their devices. With over 360,000 devices exposed to the internet, swift action is crucial.
Cisco Discloses IOS XR Flaws, Urges Immediate Software Updates
Cisco is urging immediate action to protect against two critical vulnerabilities in its IOS XR operating system, with CVSS scores of 9.8 that could allow hackers to wreak havoc on your network. Update your software now to prevent potential security breaches!
G7 Urges Industry to Accelerate Post-Quantum Encryption Defenses
The G7 cybersecurity working group is sounding the alarm: many organizations are neglecting to prepare for the quantum threat, and it's time to prioritize post-quantum encryption defenses to safeguard critical systems and data. Don't wait - the transition to post-quantum cryptography is a business risk that requires immediate attention and coordinated action.