Imagine a service designed to help users having unrestricted access to sensitive data - that's what Unit 42 discovered in Amazon Bedrock's AgentCore, where a flaw allowed for privilege escalation and data exfiltration due to overly broad permissions. This "Agent God Mode" vulnerability highlights the risks of systemic misconfiguration.
A critical vulnerability in the popular Ninja Forms plugin has been discovered, allowing hackers to upload and execute malicious code on WordPress sites without needing login credentials. If you're using Ninja Forms, update to version 3.3.27 immediately to protect your site from remote code execution attacks.
Imagine a super-smart AI tool that can uncover thousands of hidden software flaws that nobody knew existed - and what happens when that powerful technology falls into the wrong hands? A new AI model from Anthropic has raised the stakes, leaving cybersecurity experts worried about a surge in zero-day vulnerabilities.
A critical security flaw in Apache ActiveMQ Classic, hidden for over 13 years, allows remote code execution, putting vulnerable systems at risk of arbitrary command execution. This long-undetected vulnerability highlights the importance of staying vigilant and proactive in identifying and addressing potential security threats.
Imagine an AI that can proactively hunt down and fix hidden software vulnerabilities in critical systems before hackers can exploit them - Anthropic's new Project Glasswing is making this a reality with its cutting-edge AI model, Claude Mythos Preview. This groundbreaking initiative has the potential to revolutionize cybersecurity, but also raises intriguing questions about its capabilities and implications.
Meet the AI that just uncovered a 13-year-old secret: Anthropic's Claude helped researchers discover a long-hidden vulnerability in Apache ActiveMQ Classic, a flaw that had been quietly lurking for over a decade. This groundbreaking find is a testament to the power of AI-assisted research in uncovering even the most elusive bugs.
Microsoft has swiftly deployed a server-side fix to resolve a frustrating issue that left some Windows 11 23H2 users unable to access the Start Menu search feature. This quick action means you should now be able to search with ease again.
Security researchers at Unit 42 have uncovered critical vulnerabilities in Amazon Bedrock AgentCore's sandbox, revealing that a protective layer meant to separate code and services can be breached using DNS tunneling, exposing sensitive credentials in the process. This alarming discovery highlights the potential risks of slipping through the cracks of a supposedly secure system.
Nubivance is a Rapid7 Registered Partner delivering vulnerability management as a service - scanning, risk-based prioritization, and remediation follow-through across IT and OT.
Fix the backlog
Major tech players have joined forces to launch Project Glasswing, an AI-powered initiative that uses machine learning to identify and patch critical software vulnerabilities before malicious actors can exploit them. This game-changing project aims to stay one step ahead of attackers by harnessing the same AI technology that can be used for defense - and turning it into a powerful force for good.
A critical vulnerability in the Ninja Forms File Uploads premium WordPress plugin allows hackers to upload malicious files and execute code on your server - putting your entire site at risk. This flaw lets unauthenticated users wreak havoc, making it essential to take immediate action to protect your online presence.
Hackers are actively exploiting a critical vulnerability in Flowise, a popular open-source AI tool, that allows them to take control of systems designed to run code - a fundamental flaw that raises serious questions about securing AI-powered applications. This maximum-severity flaw, tracked as CVE-2025-59528, has left developers, organizations, and regulators scrambling for answers.
Researchers have uncovered a chilling new threat: GPUBreach, a flaw that uses GPU Rowhammer to corrupt memory, granting hackers a backdoor to escalate privileges and take control of your entire system. This sneaky attack exploits GDDR6 memory, flipping bits and paving the way for a complete system compromise.
A recent security patch meant to tighten up Docker Engine's defenses has left a gaping hole, exposing hosts to unauthorized access - and it's up to you to make sure you're not the one who gets exploited. A high-severity flaw, tracked as CVE-2026-34040, allows attackers to bypass authorization plugins and potentially gain access to your host.
Fortinet has rushed out an emergency patch for a zero-day vulnerability in its FortiClient EMS product, which was being exploited by attackers before the fix was even available. This swift response aims to protect businesses from potential security breaches through its endpoint security clients.
A harmless printing service? Think again! Two flaws in the Common UNIX Printing System can be exploited by an unauthenticated attacker to execute code remotely and overwrite files as root, turning a routine print stack into a potential entry point for intruders.
A disgruntled researcher has leaked working exploit code for a previously unknown Windows vulnerability, dubbed BlueHammer, allowing attackers to instantly gain administrator access to any system. This alarming development comes after the researcher privately submitted the flaw to Microsoft, which had not yet patched the vulnerability.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Fortinet has urgently patched a critical flaw in its FortiClient Enterprise Management Server (EMS) after confirming it was being exploited in the wild, sparking a dilemma for organizations: patch now and risk disruption, or wait and risk a potentially devastating cyberattack. The Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities list, underscoring the need for swift action.
Microsoft just pulled the plug on the Support and Recovery Assistant (SaRA) command-line utility, a trusted tool for diagnosing and repairing Windows systems, from all supported Windows updates as of March 10. This small change could have big operational consequences for users relying on this tool.
The US Cybersecurity and Infrastructure Security Agency (CISA) is urging federal agencies to act fast - by this Friday, they must patch a vulnerable Fortinet flaw that's already being exploited by hackers. Don't wait: secure your FortiClient Enterprise Management Server instances now to stay protected.
Google just made a bold move towards a more secure future, announcing plans to fully transition to post-quantum cryptography by 2029 - but what does this mean for your security planning today? This forward-thinking shift is a great step towards crypto-agility, and experts are already weighing in on its potential impact.
When the very tool designed to safeguard your network becomes a vulnerability, swift action is crucial - and that's exactly what Fortinet took by issuing an emergency security update over a weekend to patch a critical flaw in FortiClient Enterprise Management Server (EMS) that's being actively exploited by attackers. This out-of-the-usual-cycle patch underscores the urgency to protect your organization from prolonged exposure to potential threats.
Fortinet has urgently patched a critical vulnerability in its FortiClient EMS software, which had already been exploited in the wild, to prevent further security breaches. The flaw, tracked as CVE-2026-35616, allows for pre-authentication API access bypass and privilege escalation, posing a significant threat to endpoint security.
When small flaws are linked together, they can create massive backdoors - and the latest ThreatsDay Bulletin is sounding the alarm on this rapidly escalating threat landscape. The result? A multiplying list of active problems demanding attention now.
When the tool designed to safeguard confidential documents becomes a vulnerability, data theft can occur without a single login credential. Progress ShareFile's two chained flaws allow for pre-authentication remote code execution attacks, putting sensitive files at risk of unauthorized exfiltration.