Security news.
Major ecosystem breaches and active zero-day attacks dominate today's security updates, led by compromised root certificate authority keys triggering emergency revocations across browsers and runtimes. At the same time, threat actors are heavily exploiting edge network vulnerabilities to breach corporate perimeters and deploying autonomous AI tooling to scale web intrusions.
eMudhra Intermediate CA Private Keys Compromised
Eight intermediate CA private keys belonging to eMudhra have been compromised, prompting emergency blocking and revocation updates across Google Chrome, Mozilla, and Go to prevent spoofed site certificates.
Ransomware Groups Exploit PAN-OS Flaw to Bypass MFA
Threat actors behind Qilin and INC ransomware are actively targeting CVE-2026-0257, an authentication bypass vulnerability in Palo Alto Networks PAN-OS and Prisma Access that enables unauthorized VPN access.
Critical FortiSIEM RCE Flaw Gets Public Exploit PoC
Security researchers released a public proof-of-concept exploit for CVE-2026-106173 (CVSS 9.4), an unauthenticated path traversal vulnerability allowing remote code execution on Fortinet FortiSIEM appliances.
Zeabur Shuts Down Following Massive Infrastructure Breach
Cloud deployment platform Zeabur announced it is ceasing operations after attackers used exposed plaintext credentials to access backend systems, exfiltrating 3.2 million environment variables and over 320,000 user accounts.
Hackers Abuse Cairn AI Pen-Test Platform in Global Spree
Chinese-speaking threat actors weaponized autonomous agents from the AI platform Cairn to target over 1,200 domains, breaching networks at more than 100 organizations including John Deere and Cummins.
ConnectWise Rotates Credentials After Cloud Backup Intrusion
ConnectWise has disabled its Cloud Backup product and revoked Entra application credentials following unauthorized access that let attackers sweep Microsoft Graph tokens across client tenants.
OVHcloud Official CLI Compromised to Deliver Info-Stealers
Threat actors backdoored releases of OVHcloud’s open-source command-line tool hosted on GitHub to target developers and harvest cloud environment secrets.