CVE-2026-82329 in JFrog Artifactory could give an unauthenticated attacker administrator privileges under the default configuration. Patches are now available for self-managed deployments.
SonicWall confirmed the active exploitation of a critical SSRF flaw and an RCE vulnerability in SMA 1000 Series devices. Hotfixes are available for the affected versions.
Before release, OpenAI will restrict access to the upcoming Astra model’s advanced cybersecurity features. The company says the model can independently search for unknown vulnerabilities and prepare exploit chains.
At Fal.Con 2026, CrowdStrike announced SafeMind, a group of security models and agentic tools for the Falcon platform. The project is being developed with NVIDIA, but the general availability date and independent production results are not yet known.
The federal HHS OCR register records an Aesto cyber incident involving 9,540,683 affected individuals. The company reported possible access to protected health information in part of its AWS infrastructure.
The critical CVE-2026-0768 vulnerability in Langflow allows unauthenticated remote execution of Python code with root privileges. According to security media, VulnCheck recorded attempts to exploit it.
Microsoft fixed the critical CVE-2026-62911 vulnerability in on-premises versions of Exchange Server. NCSC-NL warns of a publicly available exploit, while Shadowserver recorded 21,899 publicly accessible IP addresses with a fingerprint of a vulnerable Exchange Server.
PaperCut confirmed incidents involving the active exploitation of two vulnerabilities in PaperCut NG and MF systems. Organizations should deploy Emergency Patch Release 3, restrict public access, and check for indicators of compromise.
The archive known as the Steam2 Teraleak reportedly contains older game builds and development materials from 2003 to 2013. Valve has not publicly confirmed the data’s origin or scope.
Microsoft is tracking a bug in which Windows may report that Microsoft Defender Antivirus is turned off even when protection remains active.