Cyber Defense Insights
Threat intelligence and defensive operations for critical systems.
A newly published Exaforce analysis describes attacks involving dormant GitHub OAuth tokens, fake AI-tool installers and MFA social engineering, with data theft beginning within minutes...
GMO Flatt Security has clarified that disabling PHP’s Session Upload Progress feature is not a complete fix for two critical remote-code-execution vulnerabilities.
A joint advisory says SafePay has affected at least 600 organizations across multiple critical-infrastructure sectors since August 2024.
Details of two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, leaked before PHP’s scheduled October 21 security release.
PHP’s security team has announced a security release for 21 October to address two critical vulnerabilities, but has not yet published technical details or fixed...
A new Cisco Talos analysis says AI-assisted vulnerability discovery is helping expose a backlog of weaknesses in older, widely used code, driving Microsoft’s October advisory...
Ahold Delhaize says it has filed a formal report with Dutch police and is restoring websites, apps and e-commerce services after taking systems offline following...
AOMEI told BleepingComputer that its chief technology officer is leading a high-priority investigation after researchers reported that its update and notification infrastructure served malware during...
Siemens says attackers are actively exploiting CVE-2026-110936 in Siemens Software Center by pairing a legitimate signed executable with malicious DLLs.
A security incident affecting BAE Systems’ Bankruptcy Noticing Center has halted bankruptcy notices nationwide for about a week.
Proofpoint says it will acquire Varonis in an all-cash transaction valued at approximately $6.3 billion, combining Proofpoint’s email and identity-security business with Varonis’ data-visibility and...
Microsoft says some Windows 11 devices may be unable to turn Smart App Control back on after installing the October 13 security update KB5127648. Devices...
Cisco says attackers are exploiting CVE-2026-76519, a critical Secure Email Gateway vulnerability that can let unauthenticated remote attackers write files and execute commands as root....
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies.
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies.
NextGen Healthcare Mirth Connect. View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to exfiltrate date or cause a denial-of-service condition.
Mitsubishi Electric Multiple FA Products (Update D).
Siemens Parasolid. View CSAF Summary Parasolid is affected by an out of bounds read vulnerability that could be triggered when the application reads files in...
Mira Hormone Monitor, Mira Android App.
Mira Hormone Monitor, Mira Android App.