Vulnerabilities

The company — whose recent vulnerabilities have been hit with zero-day and n-day exploits — also released three patches for flaws in FortiOS and FortiAP.

By Lucian Constantin

May 13, 2026 3 mins

Network SecuritySecurityVulnerabilities

What happens when China’s AI catches up to Mythos?

As Washington and Beijing meet this week, the gap between American and Chinese AI is narrowing — and the technology that could destabilize the world’s digital infrastructure is leaking out with potential cyber Cold War implications.

By Cynthia Brumfield

May 13, 2026 6 mins

Application SecurityCyberattacksGovernment

4 big mistakes you're probably still making in vulnerability management…and how to fix them

Vulnerability management isn’t about checking boxes anymore—it’s about real-time visibility, risk prioritization, and automation that keeps you one step ahead of threats.

By Action 1

Apr 28, 2025 4 mins

Endpoint ProtectionRisk ManagementVulnerabilities

Microsoft’s new AI system finds 16 Windows flaws, including four critical RCEs

The agentic tool, codenamed MDASH, will open to enterprise customers in private preview in June.

By Gyana Swain

May 13, 2026 5 mins

Endpoint ProtectionVulnerabilitiesWindows Security

May Patch Tuesday roundup: Critical holes in Windows Netlogon, DNS, and SAP S/4HANA

Admins with Dynamics 365 on-prem should also take note of a “severe” vulnerability that allows remote code execution.

By Howard Solomon

May 12, 2026 7 mins

BusinessEnterpriseMarkets

cPanel flaw exposes enterprises to hosting supply-chain risks

Attackers target hosting control panels with backdoors and SSH key abuse, turning overlooked infrastructure into entry points.

By Prasanth Aby Thomas

May 12, 2026 4 mins

SecurityVulnerabilities

Why patching SLAs should be the floor, not the strategy

A green dashboard doesn't mean you're safe; it just means you're good at the easy stuff while the "hard" risks age quietly in your backlog.

By Cory Deeter

May 12, 2026 9 mins

SecurityThreat and Vulnerability ManagementVulnerabilities

Linux kernel maintainers suggest a ‘kill switch’ to protect systems until a zero-day vulnerability is patched

One Linux vendor likes the idea, but analysts and users view it as a two-edged sword.

By Howard Solomon

May 11, 2026 6 mins

SecurityVulnerabilitiesZero-Day Vulnerabilities

Google discovers weaponized zero-day exploits created with AI

The 2FA bypass exploit stemmed from a faulty trust assumption, providing evidence of AI reasoning that can discover high-level logic flaws.

By Lucian Constantin

May 11, 2026 4 mins

CyberattacksCybercrimeZero-Day Vulnerabilities

New ‘Dirty Frag’ exploit targets Linux kernel for root access

The actively exploited flaw builds on Dirty Pipe and Copy Fail techniques to overwrite page cache and gain full system control.

By Shweta Sharma

May 11, 2026 4 mins

SecurityVulnerabilities

Five new holes, one exploited, found in Ivanti Endpoint Manager Mobile

The discovery highlights why CSOs must move away from legacy on-prem security solutions, says one expert.

By Howard Solomon

May 8, 2026 4 mins

SecurityVulnerabilities

View all

Explore a topic

Show me more

CSO Executive Sessions ASEAN: From Compliance to Cyber Resilience-Securing Patient Trust in Southeast Asia’s Hospitals

By Estelle Quek

25 Feb 202623 mins

CyberattacksCybercrimeRansomware

How Intelligence and AI Are Changing Cyber Defense | Erin Whitmore, Former CIA

By Joan Goodchild

Feb 4, 202628 mins

CyberattacksCybercrime

By Joan Goodchild

May 21, 202634 mins

Cybercrime

The Human Side of Cybersecurity: Stress, Deepfakes & the Hidden Cost of Breaches

By Joan Goodchild

May 7, 202625 mins

Data and Information Security

CSO Executive Sessions ASEAN: From Compliance to Cyber Resilience-Securing Patient Trust in Southeast Asia’s Hospitals

By Estelle Quek

25 Feb 202623 mins

CSO and CISOElectronic Health RecordsRansomware

Critical vulnerability in Cisco Secure Workload rated at maximum severity

Microsoft patches two zero-day flaws in Defender

Unpatched ChromaDB flaw leaves servers open to remote code execution

Microsoft is working on a patch for 'YellowKey' attack on Bitlocker, offers temporary fix

Drupal admins rushing to patch maximum severity SQL injection vulnerability

‘Patched’ Windows bug resurfaces 6 years later as working SYSTEM-level exploit

Exchange Server zero-day vulnerability can be triggered by opening a malicious email

Cisco warns of an actively exploited SD-WAN flaw with max severity

AI agent finds 18-year-old remote code execution flaw in Nginx

Articles

Meet Fragnesia, the third Linux kernel vulnerability in a month

PraisonAI vulnerability gets scanned within 4 hours of disclosure

Fortinet fixes two critical RCE flaws in FortiAuthenticator and FortiSandbox

What happens when China’s AI catches up to Mythos?

4 big mistakes you're probably still making in vulnerability management…and how to fix them

Microsoft’s new AI system finds 16 Windows flaws, including four critical RCEs

May Patch Tuesday roundup: Critical holes in Windows Netlogon, DNS, and SAP S/4HANA

cPanel flaw exposes enterprises to hosting supply-chain risks

Why patching SLAs should be the floor, not the strategy

Linux kernel maintainers suggest a ‘kill switch’ to protect systems until a zero-day vulnerability is patched

Google discovers weaponized zero-day exploits created with AI

New ‘Dirty Frag’ exploit targets Linux kernel for root access

Five new holes, one exploited, found in Ivanti Endpoint Manager Mobile

Explore a topic

Show me more

Microsoft releases open-source tools to operationalize AI agent safety

AI becoming an SOC imperative for curtailing emerging cyber threats

GitHub admits major source code leak after 3,800 internal repositories breached

Security Blind Spots: What the Louvre Heist Reveals About Your Organization

CSO Executive Sessions ASEAN: From Compliance to Cyber Resilience-Securing Patient Trust in Southeast Asia’s Hospitals

How Intelligence and AI Are Changing Cyber Defense | Erin Whitmore, Former CIA

Security Blind Spots: What the Louvre Heist Reveals About Your Organization

The Human Side of Cybersecurity: Stress, Deepfakes & the Hidden Cost of Breaches

CSO Executive Sessions ASEAN: From Compliance to Cyber Resilience-Securing Patient Trust in Southeast Asia’s Hospitals

Critical vulnerability in Cisco Secure Workload rated at maximum severity

Microsoft patches two zero-day flaws in Defender

Unpatched ChromaDB flaw leaves servers open to remote code execution

Microsoft is working on a patch for 'YellowKey' attack on Bitlocker, offers temporary fix

Drupal admins rushing to patch maximum severity SQL injection vulnerability

‘Patched’ Windows bug resurfaces 6 years later as working SYSTEM-level exploit

Exchange Server zero-day vulnerability can be triggered by opening a malicious email

Cisco warns of an actively exploited SD-WAN flaw with max severity

AI agent finds 18-year-old remote code execution flaw in Nginx

Articles

Meet Fragnesia, the third Linux kernel vulnerability in a month

PraisonAI vulnerability gets scanned within 4 hours of disclosure

Fortinet fixes two critical RCE flaws in FortiAuthenticator and FortiSandbox

What happens when China’s AI catches up to Mythos?

4 big mistakes you're probably still making in vulnerability management…and how to fix them

Microsoft’s new AI system finds 16 Windows flaws, including four critical RCEs

May Patch Tuesday roundup: Critical holes in Windows Netlogon, DNS, and SAP S/4HANA

cPanel flaw exposes enterprises to hosting supply-chain risks

Why patching SLAs should be the floor, not the strategy

Linux kernel maintainers suggest a ‘kill switch’ to protect systems until a zero-day vulnerability is patched

Google discovers weaponized zero-day exploits created with AI

New ‘Dirty Frag’ exploit targets Linux kernel for root access

Five new holes, one exploited, found in Ivanti Endpoint Manager Mobile

Resources

Building Federal Readiness for the AI Era

From Search to Agents: How Buyer Expectations Are Reshaping AI Platforms in 2026

Building AI Agents That Actually Deliver Business Value

Video on demand

Printers: The overlooked security threat in your enterprise | TECHtalk

Don’t ignore application security | Salted Hash Ep 35

The Dyn cyberattack, one year later | Salted Hash Ep 11

Explore a topic

Show me more

Microsoft releases open-source tools to operationalize AI agent safety

AI becoming an SOC imperative for curtailing emerging cyber threats

GitHub admits major source code leak after 3,800 internal repositories breached

Security Blind Spots: What the Louvre Heist Reveals About Your Organization

CSO Executive Sessions ASEAN: From Compliance to Cyber Resilience-Securing Patient Trust in Southeast Asia’s Hospitals

How Intelligence and AI Are Changing Cyber Defense | Erin Whitmore, Former CIA

Security Blind Spots: What the Louvre Heist Reveals About Your Organization

The Human Side of Cybersecurity: Stress, Deepfakes & the Hidden Cost of Breaches

CSO Executive Sessions ASEAN: From Compliance to Cyber Resilience-Securing Patient Trust in Southeast Asia’s Hospitals