Drupal Patches Critical RCE Flaws, Warns Exploits May Emerge Soon

Drupal, a widely adopted open-source content management system (CMS), has issued urgent security patches for two critical vulnerabilities that could allow remote code execution (RCE) on any supported version of…

Critical BlockStrap Flaw Exposes Magento and Adobe Commerce Servers to Arbitrary Code Execution

Researchers at the e-commerce security firm Sansec have issued a stark warning regarding a critical vulnerability, designated CVE-2026-103849 and codenamed "BlockStrap," that poses a severe threat to Magento and Adobe…

Critical BlockStrap Flaw Threatens Magento and Adobe Commerce Servers with Arbitrary Code Execution

Security researchers have issued a stark warning regarding a critical vulnerability, identified as CVE-2026-103849, that poses a significant threat to e-commerce platforms built on Magento and Adobe Commerce. This vulnerability,…

Unlocking the Risks: Navigating Personal ChatGPT Use on Corporate Devices

The modern workplace is increasingly intertwined with artificial intelligence, with tools like ChatGPT becoming ubiquitous for tasks ranging from drafting emails to complex problem-solving. However, this rapid adoption presents significant…

BeyondTrust Patches Critical Zero-Day Exploited by China-Nexus Actor in Stealthy Attacks

BeyondTrust, a prominent provider of identity security solutions, issued an urgent warning to its customers on Thursday, urging them to immediately patch a critical vulnerability within its Remote Support (RS)…

Hackers Exploit Collabora RCE Flaw to Backdoor Nextcloud Servers

Threat actors have actively exploited a critical command execution vulnerability, now formally identified as CVE-2026-110447, within the Collabora Online – Built-in CODE Server app, commonly known as richdocumentscode, for Nextcloud.…

AI Pentesting vs. Human Prowess: A Deep Dive into the Evolving Landscape of Cybersecurity Assessments

The cybersecurity industry is at a pivotal juncture, grappling with the accelerating integration of Artificial Intelligence (AI) into the realm of penetration testing. As AI-powered tools, such as Intruder’s AI…

Palo Alto Networks Addresses Critical PAN-OS Zero-Day Exploited in Targeted Attacks

Palo Alto Networks has issued urgent security updates to address a high-severity remote code execution (RCE) zero-day vulnerability within its PAN-OS operating system, now officially designated as CVE-2026-0322. This critical…

FBI Raids DPRK IT Worker Laptop Farms in Texas, US Nationals Arrested

The U.S. Department of Justice (DoJ) has announced a significant disruption of operations linked to the North Korean state-sponsored threat group, Famous Chollima, with the arrest of two U.S. nationals…

Microsoft Resolves Critical Always On VPN Connectivity Issues After September 2026 Windows 11 Security Updates

Microsoft has officially addressed a significant connectivity problem that has plagued users of its Always On VPN service following the deployment of its September 2026 cumulative security updates for Windows…