CISA has added critical vulnerabilities in Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities catalogue following evidence of active exploitation.
Federal agencies report that the SafePay ransomware gang has breached over 600 critical infrastructure organizations worldwide since 2024.
NIST, CISA and the NSA have released ten voluntary practices for organizations preparing for, detecting, and recovering from rogue AI agent incidents.
The US Department of Homeland Security has ordered federal civilian agencies to immediately remove DeepSeek products from government systems.
A critical path traversal vulnerability in Fortinet FortiMail, tracked as CVE-2026-104286, is under active exploitation. The zero-day could allow attackers to write arbitrary files and potentially achieve remote code execution. CISA and Fortinet have issued
