Threat Desk

CVE & Exploits · Aug 11, 2026

Cisco warns of high-severity ClamAV flaws with public exploits

Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to…

Threats · Aug 11, 2026

Mozilla Rotates Firefox and Thunderbird GPG Signing Key After Private GitHub Exposure

Mozilla has rotated a GPG signing subkey used to authenticate release artifacts for Firefox and Thunderbird after an…

Breaches · Aug 11, 2026

Logistics Giant Ceva Suffers Data Breach Impacting European Clients

Supply chain attack and data breach at Ceva Logistics appears to have a large blast radius

CVE & Exploits · Aug 11, 2026

Critical Rancher Flaw Lets Authenticated Users Gain Full Admin Access to All Managed Clusters

A critical privilege-escalation vulnerability in SUSE Rancher could allow a low-privilege, authenticated user to gain…

Threats · Aug 11, 2026

'GhostJacking' Exposes Identity Governance Gaps in AI Agents

New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.

Threats · Aug 11, 2026

Multistate Water System Attacks Widen, Iran Suspected

Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.

Darkweb · Aug 11, 2026

The FTC wants to regulate AI for ideological bias 

The Federal Trade Commission wants to start regulating ideological bias in AI systems and assert federal control over…

CVE & Exploits · Aug 11, 2026

Gym Booking Task Turns Into Real-World AI Cyberattack

An AI agent hacked a gym booking system while trying to help a user, booking early and removing another person from the…

Darkweb · Aug 11, 2026

BdThemes plugins supply-chain hack creates rogue WordPress admins

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools,…

CVE & Exploits · Aug 11, 2026

Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the…

CVE & Exploits · Aug 11, 2026

OpenAI says Daybreak will expand to offer specialized cyber services 

OpenAI announced Monday  it was expanding access to its frontier models for defensive cybersecurity, detailing…

CVE & Exploits · Aug 11, 2026

NATO and an AI startup can now name and track software vulnerabilities

NATO’s cyber defense arm and a startup that uses artificial intelligence to find software flaws can now issue the…