Security Bulletin

Organizations must automate remediation workflows to close security gaps before attackers exploit them.

Here's how SOC teams can quickly respond to incidents without bringing business to a halt.

OpenClaw removed five packages from ClawHub, its skills marketplace, that bypassed security checks even though they included infostealers and other threats.

The vulnerability stems from a race condition within the kernel's process integrity validation.

Criminals are compromising legitimate Airbnb host accounts, which have accumulated years of positive reviews and high ratings, to conduct scams.

A tool called FortigateSniffer abuses a diagnostic utility to continuously monitor network traffic.

Evo ADS addresses the challenge of securing AI agents that operate with limited human oversight by governing the tools they use, their actions during execution, and the code they generate.

Attackers can exploit the issue to disable security and integrated browser tools without needing administrator privileges or kernel exploits.

How AI agents extend a discipline once reserved for well-resourced teams to every security operations program.

The most severe flaw, CVE-2026-41947, resides in Dify's tracing system, enabling attackers to create a persistent channel for exfiltrating all messages and responses from any accessible application without authentication.

As reported by CyberScoop, an Algerian national identified as Abdellah Belmili, also known online as “SPOX,” has been extradited from Spain to face charges in the U.S. for allegedly operating a significant cybercrime enterprise that defrauded...