CVE-2026-21962, a CVSS 10.0 Oracle WebLogic proxy flaw exploited by China-linked hackers across government and commercial ...

Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code ...

FBI disrupted proxy infrastructure used in China-linked espionage to profile and steal data from U.S. critical infrastructure ...

GitLab CVE-2026-19478 is under active exploitation, with unauthenticated attacks able to modify or delete public projects ...

AISLE, a pioneer in AI-native vulnerability lifecycle management, today announced its expanded scope as a CVE Numbering Authority (CNA) under ENISA, the EU agency dedicated to enhancing cybersecurity ...

SharePoint CVE-2026-55040, a critical JWT authentication bypass, is being actively exploited hours after Rapid7 published a ...

Forbes contributors publish independent expert analyses and insights. Kate O’Flaherty is a cybersecurity and privacy journalist. U.S. President Donald Trump has cut funding for the global database of ...

Forbes contributors publish independent expert analyses and insights. Tech CEO Covering Cybersecurity, AI, Compliance & National Security. In cybersecurity, some moments pass quietly. Others expose ...

The security landscape for the Model Context Protocol (MCP) has reached a critical inflection point with the disclosure of CVE-2026-76404. This is the first critical vulnerability identified in a ...

CVE stands for Common Vulnerabilities and Exposures. It is a program launched in 1999 by MITRE, a nonprofit that operates research and development centers sponsored by the federal government, to ...