Recent Advisories

Severity ID Title Vendor Product Date Type
NONE MS:CVE-2026-42897

Microsoft Exchange Server Spoofing Vulnerability_MS:CVE-2026-42897

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker t...

N/A N/A MSCVE
NONE THN:7E008AC2F41...

Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets_THN:7E008AC2F41F8784721A7FC21B43DBC0

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTj2m9-HHmDEDzKIsalsJ_HJcwcUsIFajvcpTLP9QMyqS9F_JroTH7lXeOGZFuO6j6F-RzbIo1kBIQ0udSFQ...

N/A N/A THN
NONE MSSECURE:5FF080...

Kazuar: Anatomy of a nation-state botnet_MSSECURE:5FF080091E3A5D8496F976B20054123D

In this article 1. Delivery 2. Module types 3. Botnet operations 4. Who is Secret Blizzard? 5. Mitigation and protection guidance 6. M...

N/A N/A MSSECURE
NONE MSSECURE:BBC2B9...

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps_MSSECURE:BBC2B9AF8AFED240AD1386E73E990660

In this article 1. Background 2. What is an exploitable misconfiguration? 3. Exploitable misconfigurations in popular AI applications 4. M...

N/A N/A MSSECURE
NONE HACKREAD:DA4583...

How Fintech APIs Are Modernizing Business Cash Flow Management_HACKREAD:DA45837A73556DD9F9B886183C242732

Business cash flow is often harder to manage than revenue. A company can have strong sales and still…

N/A N/A HACKREAD
NONE IMPERVABLOG:FF2...

Using Bedrock with Claude Code? Your AWS Credentials Are Shared With Every Subprocess_IMPERVABLOG:FF2E6468F47434CB67407AB7F1141DBF

Many developers today are using Claude Code, with a growing portion running it through Amazon Bedrock. For enterprise teams, Bedrock offers major a...

N/A N/A IMPERVABLOG
NONE SCHNEIER:FF87AA...

Upcoming Speaking Engagements_SCHNEIER:FF87AADC60454183463850A4B99FDCE2

This is a current list of where and when I am scheduled to speak: * I’m giving a virtual talk on “The Security of Trust in the Age of AI,” hoste...

N/A N/A SCHNEIER
NONE QUALYSBLOG:855C...

Achieve Federal-Grade M365 Security: Governing with Qualys SSPM and SCuBA_QUALYSBLOG:855C96831EB1A034498C12E814C39899

**Qualys SaaS Security Posture Management (SSPM) introduces native support for the Secure Cloud Business Applications (SCuBA) compliance framework,...

N/A N/A QUALYSBLOG
NONE MSSECURE:C7FCC0...

Defense in depth for autonomous AI agents_MSSECURE:C7FCC0B6AA7826584F18F54114B7939D

**Designing Secure Autonomous AI Agents with Defense in Depth** AI agents are moving beyond assistance and into action. Instead of generating cont...

N/A N/A MSSECURE
CRITICAL 9.8 THN:067F4AFF97E...

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories_THN:067F4AFF97EE5175ED3AA056125B2626

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjImYNT-qC7frGzEXeok3KDX_JNMKote6V1FVXIpkAoSEER2z1YyT8dpFq5RtRhBQ0cweEPbBIuioDWFf5rw_...

N/A N/A THN