CVEs that matter, exploitation status and patch guidance without the hype.
Following recent sandbox escapes at major AI labs, Nvidia has unveiled a system pairing its OpenShell runtime with a BlueField-4 based watchdog to contain rogue AI agents through deterministic policy enforcement and network-level controls.
U.S. federal agencies must secure systems against two critical Citrix NetScaler vulnerabilities by September 30 after active exploitation was confirmed in the wild.
Two remote code execution vulnerabilities in Citrix NetScaler are being actively exploited in the wild, prompting cybersecurity agencies and IT providers to privately warn organizations to take appliances offline before patches arrive next week.
The secure file-sharing vendor instructed customers to take systems offline for six hours after receiving law enforcement intelligence about a potential weekend attack.
The Clop ransomware operation confirmed its data leak portal was compromised via a path traversal vulnerability in Grav CMS that went unpatched on their server. Grav has now backported the fix to its legacy 1.7 branch after months of protection only in version 2.x.
The Cybersecurity and Infrastructure Security Agency has added multiple flaws to its Known Exploited Vulnerabilities catalog, including critical authentication and authorization bypasses in WSO2 and Adobe Commerce that are already being weaponized in the wild.
Azul has launched an AI-powered assistant that queries live Java runtime data to surface security and licensing issues as they occur, moving beyond static reports that lose accuracy immediately after generation.
Researchers discovered that developers are inadvertently publishing GitLab's private email addresses—which contain long-lived account credentials—in public documentation, allowing attackers to create code changes and access sensitive repositories.
