Millions of WordPress sites are at risk of takeover due to a high-severity vulnerability in the popular All-in-One WP Migration and Backup plugin, with 3.25 million sites still running a vulnerable version. This flaw, tracked as CVE-2026-19949, allows attackers to execute remote code and take full control of affected sites.
Microsoft Defender for Office 365's Safe Links feature has mistakenly flagged Google search links as malicious, blocking users from accessing legitimate search results. This faulty security classification is currently preventing users from opening harmless links.
A recent exploit development stage for targeting Industrial Control Systems racked up a hefty $535.74 API usage bill over just 8 hours and 32 minutes, highlighting the costly and disturbing potential of AI-powered threat tactics. This unsettling advancement centers around CVE-2021-31886, a severe vulnerability in Nucleus FTP servers.
A whistleblower has sounded the alarm on the Trump administration's hasty and secretive effort to roll out untested IT systems for mail-in ballots, warning of potentially catastrophic problems just ahead of the 2026 midterm elections. The new systems are being developed in a way that ignores basic software development best practices, experts warn.
Thousands of Microsoft Exchange servers remain vulnerable to a high-severity flaw, leaving 21,899 internet-facing systems open to hijack attacks that could give attackers control of every mailbox. This unpatched authentication-bypass vulnerability, CVE-2026-62911, was fixed by Microsoft in August, but many servers still haven't been updated.
If you've customized your Windows 11 mouse settings, beware: the latest update, KB5120998, may be reverting them to default, causing frustrating losses in personalization. Microsoft is investigating the issue and asking affected users to report their experiences through the Feedback Hub.
If you've recently updated Microsoft Defender Antivirus, you might be seeing annoying false alarms claiming it's turned off - but don't worry, it's still working hard to protect you. These pesky alerts are affecting all supported Windows versions, including Windows 11 26H1 and Windows Server 2025.
Researchers have uncovered a vulnerability in PaperCut that allows an unauthenticated attacker to gain remote control, enabling them to execute arbitrary Java code within the application's process. This flaw can be exploited through a clever two-step chaining technique, putting unpatched PaperCut NG and MF instances at risk.
Nubivance is a Rapid7 Registered Partner delivering vulnerability management as a service - scanning, risk-based prioritization, and remediation follow-through across IT and OT.
Fix the backlog
The National Vulnerability Database (NVD) is undergoing a major overhaul as it struggles to keep up with a staggering 30,000 reclassified vulnerabilities, now marked as "Not Scheduled" for further analysis, amid a surge in AI-driven discoveries. This change aims to help manage the overwhelming backlog through selective processing and automation.
Threat actors are still finding success by exploiting simple, preventable software weaknesses that have been known for years - and it's a problem that CISA says could have been designed out of products from the start. The agency's review reveals that decades-old bugs, like improper input validation, continue to plague the industry.
ServiceNow has released urgent security updates to fix three critical vulnerabilities in its AI Platform, and experts warn customers to act fast to secure their self-hosted instances. Apply the patches now to protect against potential malicious attacks.
A critical cPanel security flaw, tracked as CVE-2026-65643, allows attackers to execute code as the root user, giving them full control of the server, by exploiting domain parking and addon domain functionality. This vulnerability impacts all supported versions of cPanel & WHM and can be triggered by an authenticated account holder.
Microsoft's latest update, KB5120998, is here with 35 fixes and a revamped taskbar, plus a new administrator protection feature that helps shield against elevation-of-privilege attacks by separating profiles. This feature, currently off by default, can be easily enabled through Microsoft Intune or Group Policy.
If your Next.js application is hosted on Windows, upgrade immediately to patch a critical vulnerability that allows unauthenticated remote code execution. This flaw, tracked as CVE-2026-75604, affects apps using both Pages Router and App Router without Cache Components.
Meet Omarchy, a bold new take on Arch Linux, now backed by $10 million in funding and led by tech visionary David Heinemeier Hansson - but beware, its early releases have raised some red flags about security. The project just rolled out Omarchy 4.0.1, a swift security fix for its mid-August "Quattro" release.
A security flaw in Kiro, known as a prompt injection vulnerability, allowed hackers to tap into sensitive data by manipulating the Kiro agent with malicious repository content. This issue, affecting Kiro IDE 0.7.45 on Windows, could send local information to an external endpoint, putting users at risk.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
The threat landscape has drastically changed: cyber attackers can now exploit vulnerabilities in as little as two days, leaving federal agencies with a shrinking window to defend against threats. To stay ahead, they must shift their focus from reacting to attacks to anticipating and preparing for what's next.
Microsoft has pinpointed a problematic driver, inpoutx64.sys, as the culprit behind Windows 11 gaming crashes, and has taken swift action to disable it and prevent further system crashes and game failures. This fix aims to put an end to frustrating errors and glitches, ensuring a smoother gaming experience for Windows 11 users.
Don't wait until it's too late: CISA has issued a directive requiring all Federal agencies to patch the exploited Citrix NetScaler flaw, CVE-2026-8452, by August 29 to avoid potential security breaches. This critical vulnerability is already being exploited in the wild, making swift action essential.
NVIDIA GPUs are vulnerable to a new type of attack, dubbed GPUThor, which can cause massive corruption - up to 377,552 bit flips per gigabyte - on certain models, including the RTX A5000, when their GDDR6 memory is exploited. This Rowhammer-style attack can bypass ECC protection, putting powerful NVIDIA workstation cards at risk.
Ubiquiti has patched three critical vulnerabilities in its UniFi line, with a severity score of 10 out of 10, that could allow hackers to gain control of affected devices. These flaws, along with 19 others, were disclosed in a security bulletin, highlighting the need for immediate updates.
New AI models are revolutionizing vulnerability discovery, condensing a process that once took months into just hours and leaving defenders scrambling to keep up. This acceleration is outpacing traditional patch cycles, with attackers now able to develop working exploit code in as little as a week.
The AI-driven vulnerability discovery surge is alarming, with OpenClaw, a popular AI project, ranking 12th in Q2 for most vulnerabilities discovered and published, with over 200 CVEs registered. This sharp increase in registered vulnerabilities is largely driven by AI adoption in both application development and vulnerability discovery.
A pair of unpatched vulnerabilities in Kaltura's mwEmbed HTML5 player library could put servers at risk of remote code execution, allowing attackers to read sensitive files and run malicious code - and affecting not just individual customers, but also every tenant on shared hosting infrastructure. This critical security gap, tracked as CVE-2026-19913 and CVE-2026-19912, remains unpatched, leaving countless systems exposed.