Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
Two pre-authentication vulnerabilities in Check Point's Security Gateway are under active attack, with one exploited as a zero-day since July and the other since mid-September.
Attackers have escalated from reconnaissance probes to active exploitation of CVE-2026-87902, a critical path traversal vulnerability in WordPress that enables remote code execution. Malicious activity spiked tenfold as threat actors began writing executable files to compromised servers.
A threat actor is deploying open-source AI agent frameworks to automate attacks on e-commerce retailers at scale, stealing over 600,000 credit card records and injecting payment skimmers into compromised websites since July.
Organizations need to run AI on sensitive data without surrendering control, while model creators refuse to expose their intellectual property. VAST Data's confidential AI architecture aims to satisfy both sides through hardware-isolated execution and cryptographic key separation.
Enterprise infrastructure management systems are facing a surge in targeted attacks, with multiple critical vulnerabilities being exploited on or before public disclosure, according to Eclypsium's latest threat tracking data.
As AI coding tools accelerate development velocity and autonomous agents make package decisions, the software supply chain has become a contested battleground where attackers chain minor flaws into critical exploits faster than defenders can patch.
The fitness tracker company built an AI-assisted workflow to handle hundreds of thousands of daily alerts without sacrificing security oversight or developer velocity.
Arista Networks has issued security updates addressing a critical zero-day vulnerability in VeloCloud Orchestrator on-premises deployments that attackers are already exploiting in the wild.
