Automated cyber signal feeds.
What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the…
CVE ID :CVE-2026-101060 Published : Sept. 27, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_tool that validates the initial tool URL but follows HTTP redirects without re-validating the…
CVE ID :CVE-2026-101045 Published : Sept. 27, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests generated before 2026-08-19, the script generator escaped this metadata…
CVE ID :CVE-2026-101043 Published : Sept. 27, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description :pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project’s pnpm-workspace.yaml.…
CVE ID :CVE-2026-88778 Published : Sept. 27, 2026, 5:16 p.m. | 2 hours, 28 minutes ago Description :Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37…
CVE ID :CVE-2026-88773 Published : Sept. 27, 2026, 5:16 p.m. | 2 hours, 28 minutes ago Description :Inconsistent interpretation of HTTP requests (‘HTTP Request/Response smuggling’) vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23,…
CVE ID :CVE-2026-82901 Published : Sept. 26, 2026, 7:16 p.m. | 20 minutes ago Description :The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in the ‘uacf7_wpcf7_mail_components’ function…
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack chain aimed…
CVE ID :CVE-2026-85984 Published : Sept. 26, 2026, 6:16 p.m. | 1 hour, 19 minutes ago Description :The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass via the mo_wp_login_intent parameter in all versions up to,…
CVE ID :CVE-2026-77203 Published : Sept. 26, 2026, 6:16 p.m. | 1 hour, 20 minutes ago Description :The Groups – Memberships and Access Control plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.6.0. This is…