Security news.
Today's cybersecurity landscape is dominated by critical vulnerabilities and the growing impact of AI in both defense and offense. Several high-severity flaws in major products require immediate attention, while reports highlight AI's role in enabling sophisticated attacks and accelerating vulnerability discovery.
Cisco Zero-Day in Identity Services Engine (ISE) With CVSS 10.0
A critical authentication bypass flaw, CVE-2026-76460, impacts Cisco's Identity Services Engine, receiving the maximum CVSS score.
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw
Microsoft addressed a maximum-severity privilege escalation vulnerability, CVE-2026-85889, in Azure AI Foundry that could allow unauthorized network access; no customer action is required.
Check Point Critical Flaw Allows Root Code Execution
Check Point Software released updates for a critical vulnerability allowing attackers to execute code with root privileges on management systems.
Gyazo Server Flaw Exploited, 23.6 Million User Records Stolen
The Gyazo image-sharing platform confirmed a data breach due to a server vulnerability that led to the theft of 23.6 million user records.
CISA Adds Two Linux Kernel Vulnerabilities to KEV Catalog
CISA has added CVE-2025-39964 (race condition) and CVE-2026-53266 (out-of-bounds write) to its Known Exploited Vulnerabilities Catalog, urging immediate patching.
New WordPress Click2Shell Flaw Chains to Code Execution
WordPress released patches for vulnerabilities, including a "Click2Shell" flaw that could allow a crafted web link to install themes and potentially lead to code execution when clicked by an admin.
Fake LastPass Authenticator GitHub Repositories Push New Rapuncel Infostealer
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate popular software and distribute a new information stealer called Rapuncel.
Plugin4Shell Flaw Affects AI Coding Agents
A vulnerability dubbed "Plugin4Shell" allows repository owners to swap legitimate plugins with malicious ones across four widely used AI coding agents, even when locked to specific versions.