CGA-3R28-5FP6-6FXW

Bulletin has no description...

CGA-2MMC-Q365-493W

Bulletin has no description...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: kargo, trivy, trivy-operator-fips, wolfictl, argo-workflows, argo-workflows-fips, gptscript, apko, kaniko-fips, grafana, gitlab-rails-ce-fips, k9s-fips, zarf-fips, external-secrets-operator-fips, witness, gitlab-rails-ce, tfsec, gitlab-runner, gomplate,...

MAL-2026-3547 Malicious code in @uipath/gov-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1528428c4478092edf22976f2f4f138666d82e58ca45ef5926c7300e27ca128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vibe Hacking: Two AI-Augmented Campaigns Target Government and Financial Sectors in Latin America

TrendAI™ Research has identified two emerging threat campaigns—SHADOW-AETHER-040 and SHADOW-AETHER-064—that use agentic AI to drive intrusion operations against government and financial organizations in Latin America, marking these among the first cases we have observed of AI agents executing...

CGA-4M24-QJQJ-822G

Bulletin has no description...

CGA-393W-QPC7-55CP

Bulletin has no description...

CGA-3WX7-Q42Q-W233

Bulletin has no description...

CGA-8CVP-XQ6G-CCH4

Bulletin has no description...

CGA-868C-HV7C-Q9WM

Bulletin has no description...

CGA-8CCH-G26P-XJG2

Bulletin has no description...

CGA-7796-RJFC-35HM

Bulletin has no description...

CGA-3F6G-2HRX-47QG

Bulletin has no description...

CGA-2M7H-Q32X-5FWQ

Bulletin has no description...

CGA-3P98-FPHW-2495

Bulletin has no description...

CGA-3H6M-9W6W-JFC4

Bulletin has no description...

CGA-8GRX-665W-5HMF

Bulletin has no description...

CGA-5XRG-76GQ-8RQJ

Bulletin has no description...

SL5 Standard for AI Security

Security Level 5 SL5 is a security posture for AI systems that could plausibly thwart top-priority operations by the world's most cyber-capable institutions: those with extensive resources, state-level infrastructure, and expertise years ahead of the public state of the art. The SL5 terminology...

CVE-2026-43510 CISA manage.get.gov insecure portfolio administrative privileges

manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. Fixed in 1.176.0 on or around 2026-04-30...