CVE Growth Surges Beyond 90,000 in 2026
CVE Growth Surges Beyond 90,000 in 2026

CVE publications have passed 90,000 in 2026, putting more assessment work into vulnerability...

PHP2Shell Turns Firewall Access Into Directory Exposure
PHP2Shell Turns Firewall Access Into Directory Exposure

Attackers exploited internet-facing Palo Alto Networks management interfaces, then used compromised...

Device Code Phishing Turns Inbox Access Into Persistence
Device Code Phishing Turns Inbox Access Into Persistence

Device code phishing helped criminals compromise more than 12,000 inboxes across over 10,000...

HTTP2Shell Turns Compressed Web Data Into Code Execution
HTTP2Shell Turns Compressed Web Data Into Code Execution

A flaw in the code that opens compressed data has put web servers, HTTP clients and other...

AGENTS.md Files Turn Downloads Into Agent Commands
AGENTS.md Files Turn Downloads Into Agent Commands

An AI coding agent tried to install malware after reading AGENTS.md in the Downloads folder. The...

Lazarus FlashHole Hides Malware With Post-Quantum Keys
Lazarus FlashHole Hides Malware With Post-Quantum Keys

Lazarus is using post-quantum cryptography to conceal malware delivery in an espionage campaign...

PHP2Shell Emergency Virtual Patching With Xcitium WAF
PHP2Shell Emergency Virtual Patching With Xcitium WAF

Two critical vulnerabilities in the PHP runtime, collectively known as PHP2Shell, can potentially...

CVE-2026-0257 Links GlobalProtect to Ransomware
CVE-2026-0257 Links GlobalProtect to Ransomware

Ransomware operators are exploiting CVE-2026-0257 to enter corporate networks through...

Fake CAPTCHA Phishing Turns Verification Into a Trap
Fake CAPTCHA Phishing Turns Verification Into a Trap

The document hasn’t opened yet. Instead, a page asks the employee to prove they are human...