Category: Cyber Security News

Cisco customers are facing another actively exploited zero-day, CVE-2026-20245, in Cisco Catalyst SD-WAN Manager, and no patch or workaround is currently available. Cisco said the flaw can let authenticated or local attackers execute commands as root, while earlier vulnerabilities such as CVE-2026-20182 and CVE-2026-20127 may have helped enable access. #CVE-2026-20245 #CiscoCatalystSDWANManager #CVE-2026-20182 #CVE-2026-20127 #Mandiant

CISA plans to overhaul how it prioritizes vulnerabilities and critical infrastructure risks, shifting from a patch-fast approach to a more granular assessment based on asset exposure, exploitability, and known exploited vulnerabilities. Acting director Nick Andersen said the agency will also issue a binding operational directive for federal agencies and refocus on hiring and implementing CIRCIA requirements. #CISA #KEV #CIRCIA

Anthropic is releasing Claude Fable 5, a guarded version of Claude Mythos, with safety controls that route sensitive cybersecurity and biology queries to Claude Opus 4.8 instead of the full model. The company says the move balances public access with risk reduction, as Mythos-level capabilities could be misused for hacking, exploit development, and bioweapons research. #Anthropic #ClaudeMythos #ClaudeFable5 #ClaudeOpus4.8 #ProjectGlasswing

Veeam has issued an update to fix CVE-2026-44963, a critical flaw in Backup & Replication that can let a low-privileged domain user achieve remote code execution on domain-joined backup servers. The company warns that, although no active exploitation has been reported, attackers are likely to reverse-engineer the patch quickly, especially given Veeam’s history of being targeted by ransomware groups. #Veeam #CVE-2026-44963 #BackupAndReplication

Microsoft removed 73 GitHub repositories across several of its organizations after a suspected compromise tied to the Miasma/Shai-Hulud supply-chain campaign, briefly disrupting CI pipelines and Azure Functions workflows. The repositories were restored as clean, but Microsoft said it continued investigating potential malicious content and notified affected customers. #Microsoft #GitHub #Azure #AzureFunctions #Miasma #ShaiHulud #durabletask #PyPI

Mythos Preview is a major advance in vulnerability discovery, especially when analyzing source code, and XBOW found it unusually strong at identifying precise technical leads across web, native-code, and reverse-engineering tasks. However, its real-world effectiveness still depends on live-site validation, careful orchestration, and the right tooling to confirm which findings are exploitable and worth fixing. #MythosPreview #Anthropic #XBOW #Opus46 #GPT55 #ProjectGlasswing #Chromium #V8

New iterations of the Shai-Hulud supply chain attack have infected over 100 packages across the NPM and PyPI ecosystems, with the Miasma and Hades variants spreading through open source software. The attacks targeted packages tied to Red Hat, Vapi, ai-sdk-ollama, and other ecosystems while stealing credentials and exfiltrating data through malicious…

SAP released 15 new security notes, including four critical fixes for NetWeaver, Commerce, and Data Hub, with CVE-2026-44748 in NetWeaver AS ABAP and ABAP Platform rated the most severe at 9.9. The flaws include SAML authentication bypass-style identity tampering, memory corruption in the SAP kernel, a Spring Security issue affecting Commerce…

Atsign’s AI Architect applies a “security through invisibility” model to agentic and vibe-coded apps by hiding identities, credentials, and resources behind cryptographic controls. The approach aims to let developers build quickly with AI while reducing the chance that unknown vulnerabilities or exposed attack surfaces can be exploited. #Atsign #AIArchitect #AAIA…

DINUM said hackers breached Tchap, the French government’s encrypted messaging platform, by using a compromised user account, prompting an investigation into what data may have been accessed. The attacker allegedly used social engineering to reach the platform and claimed to have stolen messages, files, and account information from public-sector users. #Tchap #DINUM #ANSSI #CNIL

CISA has ordered U.S. federal agencies to patch Check Point Remote Access VPN and Mobile Access deployments after a critical zero-day vulnerability, CVE-2026-50751, was exploited in attacks linked to Qilin ransomware affiliates. Check Point said the flaw affects certain IKEv1-based configurations and urged immediate updates or mitigations to block unauthorized VPN access. #CheckPoint #CVE202650751 #Qilin

CISA has added CVE-2026-42271, a high-severity command injection flaw in BerriAI LiteLLM, to its Known Exploited Vulnerabilities catalog due to evidence of active exploitation. Horizon3.ai also showed that CVE-2026-42271 can be chained with CVE-2026-48710 in Starlette to bypass authentication and achieve unauthenticated remote code execution against vulnerable LiteLLM deployments. #CVE-2026-42271 #CVE-2026-48710…

Google has released Chrome 149 to fix 74 vulnerabilities, including CVE-2026-11645, a zero-day in V8 that was actively exploited and could let attackers run code in a sandbox through a specially crafted HTML page. The researcher who reported it in April received $55,000, and this marks the fifth Chrome zero-day exploited…

Check Point warned that CVE-2026-50751 is a critical authentication bypass flaw in its VPN and firewall products that has been exploited in the wild as a zero-day since May 7. The company also disclosed CVE-2026-50752, a related certificate validation issue, and released hotfixes while CISA added CVE-2026-50751 to its KEV catalog….