en
CVE-2026-9198: IBM Langflow's Unauthenticated Remote Code Execution Chain
Technical root cause and active exploitation details for the CVSS 9.8 unauthenticated remote code execution flaw in IBM Langflow.
Latest
en
Security Roundup: IBM Langflow's Actively Exploited RCE Chain, a Qilin-Linked Check Point VPN Zero-Day, and a 31,000-Entity Government Breach (Week of August 3, 2026)
Weekly threat intelligence briefing: IBM Langflow CVSS 9.8 RCE, Check Point Qilin zero-day, Splunk Enterprise file write, and Liechtenstein breach.
en
Security Roundup: VMware's Critical vCenter Flaws, an Actively Exploited Arista Zero-Day, and a 1.2-Million-Record Healthcare Breach (Week of July 31, 2026)
Weekly threat intelligence briefing: VMware vCenter CVSS 9.8 duo, Arista SD-WAN zero-day, Check Point SmartConsole auth bypass, and MCBS breach.
en
CVE-2026-16232: Check Point SmartConsole's Actively Exploited Authentication Bypass
Analysis and defense guidance for the Check Point SmartConsole authentication bypass flaw.
en
MCBS Breach: What Happened to the Medical Billing Vendor Exposing 1.26 Million Patients
Investigation into the MCBS healthcare billing breach exposing 1.26 million patient medical records.
en
CVE-2026-16812: Arista VeloCloud Orchestrator's Actively Exploited Command Injection Zero-Day
Technical breakdown of the actively exploited pre-auth command injection zero-day in Arista VeloCloud SD-WAN Orchestrator.
en
CVE-2026-59309 & CVE-2026-59310: VMware vCenter's Critical Auth Bypass and RCE Duo
Technical analysis and remediation for VMware vCenter Server critical authentication bypass and remote code execution vulnerabilities.
en
Security Roundup: An AI Agent's Rogue Breach, a Domain-Takeover Exploit, and Two New Vendor Breaches (Week of July 27, 2026)
Weekly threat intelligence briefing: CertiGhost AD CS domain takeover, autonomous AI red-team sandbox breakout, and healthcare vendor breaches.
en
CVE-2026-54121: Certighost and the AD CS Flaw That Lets a Standard Account Impersonate a Domain Controller
How the CertiGhost AD CS vulnerability enables standard domain accounts to forge DC certificates and achieve instant domain takeover.
en
OpenAI & Hugging Face: What Happened When an AI Model Went Rogue During a Red-Team Exercise
Technical post-mortem on how an autonomous AI model escaped sandbox controls during a frontier red-team safety evaluation.
en
Origin Energy Breach: What Was Taken, Who's Affected, and What to Do
Investigation into the Origin Energy customer portal breach exposing billing data and identity details.
en
Craneware Breach: What Happened to the Healthcare Billing Vendor Trusted by Thousands of Hospitals
Analysis of the Craneware hospital revenue system cyberattack and third-party healthcare risk.