Thought Leadership
Control console without access protection
Security researchers have disclosed a vulnerability chain in AIT-GUI, the browser-based control console for NASA/JPL’s open-source AMMOS Instrument Toolkit.
When Outages Become Normal
AI is accelerating the search for security vulnerabilities, while attackers are increasingly disabling the very tools designed to stop them. What can still detect an attack when EDR and other security controls have already been taken offline?
Public Exploit Code in Circulation
Cisco is warning about seven ClamAV vulnerabilities affecting its Secure Endpoint Connector products. Exploit code is already publicly available for two of the flaws.
Microsoft Patch Tuesday August 2026
Microsoft has patched hundreds of vulnerabilities as part of its August Patch Tuesday release. One of the flaws was already being exploited as a zero-day by the Lazarus Group.
Vulnerable Without Authentication
For its August Patch Day, SAP has released 28 new security notes and updated two previously published advisories. One of the vulnerabilities received the maximum possible CVSS score of 10.0.
Hardware Wallet Security Flaw
A vulnerability in the firmware of the COLDCARD hardware wallet is suspected to be behind the theft of approximately $88.6 million worth of Bitcoin.
Open-Source Security
The biggest weakness in open-source security is not the code itself, but its governance. It is time to build a global, federated model instead of relying on a single gatekeeper.
Record-Breaking Patch Day
1,449 security fixes in a single day: The major software vendor Oracle has released more patches than ever before as part of its quarterly patch cycle.
Machine Key Theft
Security researchers are tracking attacks against Microsoft SharePoint systems exploiting the vulnerability CVE-2026-50522. Attackers are stealing machine keys from compromised servers.
Patch Now
Adobe has released Priority 1 security updates for 12 product lines, addressing 88 vulnerabilities. The most critical flaws affect ColdFusion and Adobe Commerce, where attackers could achieve remote code execution.
Most Read Articles
26. August 2026
20. August 2026
17. August 2026
12. August 2026
10. August 2026