vulnerabiities
For a month over the Northern Hemisphere summer, your security issues will have to wait, unless you pay for support.
All the joy of physical-presence vulnerabilities but remotely, and many cheap, single-port IP-KVMs are wide open, says Eclypsium.
No reports yet that CVE-2026-20079 and CVE-2026-20131 are being exploited, but we happen to know Cisco 0days get quietly exploited for years.
The API keys Google told you to make public can now be used to exfiltrate data via Gemini or run up usage, says Truffle.
Assuming a vendor is compromised (yet again), standard claims of password safety simply don't hold up, says a paper published on Monday.
Expedition, a migration tool, hit by bug that could allow attackers with network access to "access secrets, credentials, and other data".
APT deploys web shell disguised as a PNG file in a bid to steal credentials and crack into customers' networks downstream.
"A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user."