All news

USN-8871-1: Linux kernel (Raspberry Pi) vulnerabilities

USN-8851-3: Linux kernel (Azure) vulnerabilities

Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports

CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability

Citrix NetScaler Targeted Via New Zero Day

Apple iCloud Mail flaws allowed sender spoofing that passed security checks

USN-8868-1: LibreOffice vulnerabilities

U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog

Citrix warns of actively exploited NetScaler flaw days after zero-day patch rush

Trust at Machine Speed: Securing the New Cyber Order in the Age of Agentic AI

USN-8867-1: Ceph vulnerability

USN-8865-1: EDK II vulnerabilities

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)

Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports

Google Suspends Open Source Bug Bounty Over AI-Generated Reports

Should the CISO role be split in two?

Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE

AI slop submissions force Google to freeze its open-source bug bounty

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Vulnérabilité dans Citrix NetScaler ADC et Gateway (05 octobre 2026)

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 2

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04…

گوگل هم تسلیم هوش مصنوعی شد؛ هکرها دیگر برای گزارش آسیب‌پذیری‌‌ها پاداش نمی‌گیرند

Chromium: CVE-2025-2137 Out of bounds read in V8

Chromium: CVE-2025-1920 Type Confusion in V8

Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited

Security Affairs newsletter Round 598 by Pierluigi Paganini – INTERNATIONAL EDITION

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware