CVE ID :CVE-2026-68749 Published : Aug. 6, 2026, 4:16 p.m. | 2 hours, 59 minutes ago Description :Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauthenticated remote attacker to exhaust server CPU via a long CSS…
A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks. The server-side gate hides…
OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, gambling, and law enforcement impersonation schemes. To that end, it banned a coordinated network of…
CVE ID :CVE-2026-8478 Published : Aug. 5, 2026, 6:24 p.m. | 6 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input…
CVE ID :CVE-2026-9077 Published : Aug. 5, 2026, 5:16 p.m. | 1 hour, 13 minutes ago Description :IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass localhost-only restrictions and write arbitrary MCP server configurations to IDE configuration files…
CVE ID :CVE-2026-20312 Published : Aug. 5, 2026, 5:16 p.m. | 1 hour, 13 minutes ago Description :As part of Cisco’s ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review.…
CVE ID :CVE-2026-18830 Published : Aug. 4, 2026, 5:42 p.m. | 39 minutes ago Description :Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted…
CVE ID :CVE-2026-47623 Published : Aug. 4, 2026, 5:33 p.m. | 47 minutes ago Description :NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial…
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA)…
CVE ID :CVE-2026-24254 Published : Aug. 4, 2026, 5:23 p.m. | 58 minutes ago Description :NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability…