MEDIUMVulnerability
Global

The browser blind spot: Why your security tool may not be blocking what you think it is [Guest Diary], (Wed, Jun 17th)

·Source: SANS ISC

Updated:

Executive Summary

[This is a guest diary submitted by Varun Murdula]

Analysis

[This is a guest diary submitted by Varun Murdula]
Source Attribution

Originally published by SANS ISC on Jun 17, 2026.

Related Threats

CRITICALVulnerability

Hostile states behind three-quarters of attacks on Britain's critical infrastructure, cyber chief warns

NCSC CEO Richard Horne warned that “kinetic targeting in any conflict tomorrow will be based on intelligence gathered today” and that nation-state adversaries were “prepositioning” throughout British critical infrastructure.

The Record
CRITICALVulnerability

NVD CRITICAL: CVE-2026-53874 — picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowin...

picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbitrary code by hiding eval calls nested under callable objects via getattr. Attackers can embed malicious code in pickle files that evades detection but executes when the pickle is loaded from untrusted sources.

CVE-2026-53874
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-53873 — picklescan before 1.0.4 contains an incomplete blocklist for the profile module ...

picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run() function, allowing attackers to achieve arbitrary code execution via exec(). Attackers can craft malicious pickle files calling profile.run(statement) to execute arbitrary Python code while picklescan reports zero security issues.

CVE-2026-53873
NIST NVD