22 critical threats detected in the last 24 hours. Active threat actors: ShinyHunters. Immediate review of affected systems recommended.
Critical
NVD CRITICAL: CVE-2026-96119 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obta...
NVD CRITICAL: CVE-2026-82110 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a...
NVD CRITICAL: CVE-2026-82103 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a...
NVD CRITICAL: CVE-2026-82101 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a...
NVD CRITICAL: CVE-2026-90920 — IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute ...
Why It May Take a Crisis to Move Congress on Cyber Liability
NVD CRITICAL: CVE-2026-96119 — IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obta...
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application.
NVD CRITICAL: CVE-2026-82110 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a...
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.
NVD CRITICAL: CVE-2026-82103 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a...
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthorized actor.
NVD CRITICAL: CVE-2026-82101 — IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a...
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
NVD CRITICAL: CVE-2026-90920 — IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute ...
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.
Flock can now issue CVEs for its own products. Should we trust it?
Flock joined the CVE Program as a CNA, giving the company authority to assign IDs to vulnerabilities in its own surveillance cameras and license plate readers. The post Flock can now issue CVEs for its own products. Should we trust it? appeared first on CyberScoop .
Why It May Take a Crisis to Move Congress on Cyber Liability
<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/it-may-take-crisis-to-move-congress-on-cyber-liability-image_small-10-a-33076.jpg" align=right hspace=4><b>Report Authors Warn Federal Cyber Mandates Likely Won't Progress Without Disaster</b><br>It may take a disaster before Congress makes technology vendors liable for insecure products or mandates baseline security for critical
IonQ Buys Elisity to Bridge Zero Trust, Quantum Security
<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ionq-buys-elisity-to-bridge-zero-trust-quantum-security-image_small-5-a-33079.jpg" align=right hspace=4><b>All-Stock Deal Combines Post-Quantum Cryptography With Identity-Based Network Access</b><br>IonQ plans to acquire zero trust cybersecurity firm Elisity in an all-stock deal valued at up to $1.3 billion, combining identity-bas
UK AI Safety Institute Warns of Risks in Unreleased Models
<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/uk-ai-safety-institute-warns-risks-in-unreleased-models-image_small-3-a-33078.jpg" align=right hspace=4><b>Agency Says Frontier AI Risks Emerge Before Release as Safety Testing Falls Behind</b><br>The United Kingdom's AI Safety Institute believes frontier AI models pose risks before they're released to the public, and it doubled d
Fake Biotech Event Lures Victims Into Malware Trap
<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/fake-biotech-event-lures-victims-into-malware-trap-image_small-8-a-33075.jpg" align=right hspace=4><b>Researchers Say Fraudulent Speaker Invites Tie Threat Actor to Ransomware Group</b><br>Cybercriminals are using a fictitious biotech conference in Boston and fraudulent invitations to speak at the event as part of a social enginee
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
NVD CRITICAL: CVE-2026-109566 — Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerabi...
Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-created on every rpd:make run, letting attackers log in as a global super admin bypassing per-record authoriz
NVD CRITICAL: CVE-2026-108929 — A flaw has been found in Netcore NR268 1.7.121109. The affected element is the f...
A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely.
Live Activity
Threat Alerts
Real-time alerts for the threats that matter to you. Choose your severity levels and threat categories.