Cyber News

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-42248 and CVE-2026-42249) found in Ollama software.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-40550 to CVE-2026-40552) found in mpGabinet software.

Incorrect Authorization vulnerability (CVE-2025-13480) has been found in Fudo Enterprise software.

Authorization bypass vulnerability (CVE-2025-13822) has been found in MCPHub project.

CERT Polska has received a report about a Stored Cross-site Scripting vulnerability found in Bludit software.

Fixing security vulnerabilities in code takes seconds, while patching in production creates high operational costs and risk. Discover how empowering developers as your first line of defense eliminates exposure across every phase of your software pipeline.

A practitioner’s guide to log visibility, incident readiness, and threat hunting across the major version control services.

Malicious versions of the arrayref Rust crate (and others) executed a backdoor at compile time. The campaign's infrastructure overlaps with recent DPRK supply chain attacks, including Mastra and axios.

Wiz Red Agent independently discovered and exploited a GitHub Actions injection missed by GitHub’s Advanced Security, validated access to sensitive data in Snowflake’s internal Jira, and assessed the blast radius—all without human intervention, five days after the flaw became live.

A practical playbook for investigating GitHub token compromise, drawn from Wiz CIRT's response to a coordinated multi-organization campaign.

Automating DISA STIG Compliance for Amazon Linux 2023 and Windows Server 2025, giving defense and federal teams immediate and continuous hardening validation.

S3 compatible services carry many of the same concerns as the original S3 service. This article highlights which assumptions break and what risks remain.

Continuously uncover complex, exploitable risks to stay ahead in the AI Threat Era with the Red Agent