Explore

Rapid Read Rapid Read
CISA Identifies Critical Vulnerabilities in Langflow, Tomcat, and N-central as Actively Exploited

CISA Identifies Critical Vulnerabilities in Langflow, Tomcat, and N-central as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, highlighting their active exploitation. These vulnerabilities include a code injection flaw in Langflow (CVE-2026-9198) with a CVSS score of 9.8, which allows unauthenticated attackers to execute remote code. This issue was addressed in July 2026 with version 1.10.1. Another vulnerability, CVE-2026-34486, affects Apache Tomcat, allowing a bypass of encryption mechanisms, and was fixed in April 2026. The third, CVE-2026-18556, is an authentication bypass in N-able N-central, which required a subsequent patch due to an incomplete initial fix. These vulnerabilities are being exploited by threat actors, including a Chinese-speaking group using AI-enabled hacking campaigns. The exploitation of these flaws poses significant risks to internet-exposed devices and infrastructure.
Rapid Read Rapid Read
AI-Generated Fake Vulnerabilities Flood U.S. National Database, Raising Security Concerns

AI-Generated Fake Vulnerabilities Flood U.S. National Database, Raising Security Concerns

Security firm JFrog has identified a significant issue with AI-generated fake vulnerabilities being submitted to the U.S. National Vulnerability Database (NVD). The firm discovered that out of 55 vulnerability reports posted by a new GitHub account, 54 were fabrications. These reports included false claims of severe memory bugs in SQLite, with some being rated as high as 9.8 in severity. The fake vulnerabilities were generated by AI and managed to reach the NVD, where they were marked as critical. This situation highlights a growing problem where AI-generated content is being trusted without sufficient verification, leading to potential security risks as AI coding agents may attempt to fix non-existent issues.
Trendline Trendline
IBM and Red Hat Offer Free AI-Powered Security Initiative to U.S. Universities and NGOs

IBM and Red Hat Offer Free AI-Powered Security Initiative to U.S. Universities and NGOs

IBM and Red Hat Offer Free AI-Powered Security Initiative to U.S. Universities and NGOs
Trendline Trendline
IBM and Red Hat Launch Lightwell Initiative to Secure Open Source Software

IBM and Red Hat Launch Lightwell Initiative to Secure Open Source Software

IBM and Red Hat Launch Lightwell Initiative to Secure Open Source Software
FactFable FactFable
Why Black Hat USA Could Reveal the True Cost of AI Convenience

Why Black Hat USA Could Reveal the True Cost of AI Convenience

As the world embraces AI, the Black Hat USA conference is set to expose the technology's hidden security risks and redefine our understanding of digital safety.
Trendline Trendline
IBM and Red Hat Provide Lightwell to Universities and NGOs to Enhance Open Source Security

IBM and Red Hat Provide Lightwell to Universities and NGOs to Enhance Open Source Security

IBM and Red Hat Provide Lightwell to Universities and NGOs to Enhance Open Source Security
Trendline Trendline
IBM and Red Hat Provide Free Access to Lightwell for Universities and NGOs to Enhance Software Security

IBM and Red Hat Provide Free Access to Lightwell for Universities and NGOs to Enhance Software Security

IBM and Red Hat Provide Free Access to Lightwell for Universities and NGOs to Enhance Software Security
FactFable FactFable
The One Red-Team Finding Leaders Should Watch After Black Hat USA

The One Red-Team Finding Leaders Should Watch After Black Hat USA

Cybersecurity experts at Black Hat 2026 revealed a critical new threat: the hijacking of autonomous AI agents. Here's why leaders must pay attention.
Trendline Trendline
Jim Cramer Sells Bitcoin Over Quantum Computing Fears, Crypto Community Reacts

Jim Cramer Sells Bitcoin Over Quantum Computing Fears, Crypto Community Reacts

Jim Cramer Sells Bitcoin Over Quantum Computing Fears, Crypto Community Reacts
Trendline Trendline
IBM Expands BPaaS Capabilities with AI and Hybrid Cloud Integration

IBM Expands BPaaS Capabilities with AI and Hybrid Cloud Integration

IBM Expands BPaaS Capabilities with AI and Hybrid Cloud Integration
Rapid Read Rapid Read
AI Worms Pose New Cybersecurity Threats in Copilot Systems

AI Worms Pose New Cybersecurity Threats in Copilot Systems

AI researcher Håkon Måløy has highlighted a potential cybersecurity threat involving AI worms in Copilot systems. The attack involves hidden instructions in a document used by Copilot for Word, which can manipulate the document and spread the worm to other documents. This vulnerability, disclosed to Microsoft in March, remains reproducible despite mitigation attempts. The attack uses a JSON-formatted malicious prompt that can be concealed as white text on a white background, making it difficult for victims to detect. This type of attack does not require special access, only the sharing of a malicious document with the victim.
Rapid Read Rapid Read
Cyberattacks on U.S. Water Systems Expand to 12 States, Including South Dakota

Cyberattacks on U.S. Water Systems Expand to 12 States, Including South Dakota

Water utilities across at least 12 states, including South Dakota, have reported cyberattacks on their operational technology, with the campaign allegedly linked to Iranian hackers. The Cybersecurity and Infrastructure Security Agency (CISA) has issued advisories warning that these attacks target internet-connected operational technology devices, such as programmable logic controllers (PLCs). The FBI has noted that since July 27, water and wastewater utilities in several states have experienced disruptions. In Georgia, the Clayton County Water Authority confirmed a temporary disruption in its systems, leading to a precautionary boil water advisory, which has since been lifted. The attacks have resulted in operational challenges, including boil water notices and manual operations.