A 7.8 CVSS Cisco Catalyst SD-WAN zero-day was exploited at least two months before disclosure, chaining with two undisclosed auth bypass flaws to plant a hidden 'troot' account at a telco.
A reported Novo Nordisk data breach story renders as a privacy consent wall, not an article. The interesting security question is what that tells us about disclosure pipelines.
Three FortiSandbox CVEs under active exploitation and a 30,000-device FortiBleed campaign turn the Fortinet renewal cycle into a board-level conversation.
APT28's pivot to 18,000 hijacked routers and cloud-API command channels rewrites the threat model for every platform team relying on commodity edge gear and OAuth.
A 9.8 CVSS bug in Splunk Enterprise lets unauthenticated attackers write files and pop a shell via an exposed PostgreSQL sidecar. Patch this week, not next sprint.
A 9.8-severity SSRF in Oracle PeopleSoft handed ShinyHunters two weeks of unmonitored access, 300 endpoints, and a 48GB haul from a single victim. Universities took the worst of it.
SoFi Hong Kong discovered a third-party vendor breach on April 30, 2026. The vendor stays anonymous, the scope is unknown, and customers are left refreshing their inboxes.