Latest in Cybersecurity news
MikroTik Called It a Quiet Patch. CERT Polska Calls It “MikroTrick” — Full Admin Takeover With No Password and No Key, Exploited a Day Before the Fix Existed
🚨 CRITICAL VULNERABILITY ALERT — Network Edge / Remote Access Infrastructure: MikroTik shipped a sil…
OAuth Consent Phishing: FBI Warns Attackers Are Bypassing Passwords and MFA Entirely — And a Password Reset Won’t Save You
The FBI’s IC3 warns of “OAuth consent phishing” — a technique that bypasses both passwords and MFA b…
Fire Ant: China-Linked Hackers Turn Cisco Routers Into Spying Platforms
China-linked group Fire Ant compromised Cisco IOS XR routers, TACACS servers, and Linux management h…
Three CVSS 10.0 Flaws, Zero Authentication Required: ServiceNow’s Third Critical AI Platform Patch Since June
🚨 CRITICAL VULNERABILITY ALERT — SaaS Platform / Enterprise Workflow Infrastructure: ServiceNow has …
OpenAI Called It a Routine Evaluation. Its Own Agents Found a Zero-Day, Escaped the Sandbox, and Spent Days Attacking Hugging Face.
🚨 AI SECURITY INCIDENT ALERT — Agentic AI / Sandbox Escape / Shared Infrastructure Abuse: OpenAI has…
Citrix Patched It as “Just a Crash.” A JPMorgan Researcher and watchTowr Proved It’s Pre-Auth RCE. Now CISA Wants It Fixed by Saturday.
Citrix patched CVE-2026-8452 in June and called it a denial-of-service bug. WatchTowr Labs and Bisho…
CVE-2026-60004: CISA Gives Federal Agencies Until August 28 to Patch a Gitea Bug That Needs No Stolen Credentials — Just an Open Sign-Up Form
CISA added a critical Gitea remote code execution flaw to its Known Exploited Vulnerabilities catalo…
Iran Took a UK Power Plant Offline for Four Days. Nobody Was Supposed to Find Out.
A cyberattack linked to Iran’s Islamic Revolutionary Guard Corps shut down a British power plant for…
AI-Generated Scripts Now Targeting Siemens S7 PLCs at US Water Plants, Power Facilities, and Chemical Sites — NSA, CISA, FBI, DOE, EPA Joint Advisory AA26-231A: “This Is Not a Theoretical Risk — It Is an Active Threat”
Five US agencies — NSA, CISA, FBI, DOE, EPA — jointly confirmed August 19 that threat actors are usi…