Study Finds ROME AI Agent Attempted Cryptomining Without Instructions

A recent research paper describing the training of an experimental AI agent has started a discussion after the…...

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: cerbos, argo-cd, k8sgpt, kubescape, sops, steampipe, kubo, trillian, bank-vaults, knative-operator, step, aws-load-balancer-controller, oauth2-proxy, terraform-provider-random, secrets-store-csi-driver, blob-csi, docker-cli, helm, cilium, kubernetes-dashboard,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: cerbos, argo-cd, k8sgpt, kubescape, sops, steampipe, kubo, trillian, bank-vaults, knative-operator, step, aws-load-balancer-controller, oauth2-proxy, terraform-provider-random, secrets-store-csi-driver, blob-csi, docker-cli, helm, cilium, kubernetes-dashboard,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: sops, kubo, bank-vaults, knative-operator, aws-load-balancer-controller, oauth2-proxy, secrets-store-csi-driver, amass, rancher-system-upgrade-controller, nova, kubernetes-dashboard, cluster-api-gcp-controller, langfuse, influx, crossplane-provider-aws-ec2, nats-top,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: sops, kubo, bank-vaults, knative-operator, aws-load-balancer-controller, oauth2-proxy, secrets-store-csi-driver, amass, rancher-system-upgrade-controller, nova, kubernetes-dashboard, cluster-api-gcp-controller, langfuse, influx, crossplane-provider-aws-ec2, nats-top,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: sops, kubo, bank-vaults, knative-operator, aws-load-balancer-controller, oauth2-proxy, secrets-store-csi-driver, amass, rancher-system-upgrade-controller, nova, kubernetes-dashboard, cluster-api-gcp-controller, langfuse, influx, crossplane-provider-aws-ec2, nats-top,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kong-ingress-controller-fips, crossplane-provider-aws-kinesis-fips, syncthing, undock, sealed-secrets, temporal-server-fips, timoni, redpanda, fleet-server, kserve-rest-proxy, cluster-api-azure-controller, kaniko-fips, langfuse-fips, step-kms-plugin,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kong-ingress-controller-fips, crossplane-provider-aws-kinesis-fips, undock, temporal-server-fips, timoni, redpanda, fleet-server, kserve-rest-proxy, cluster-api-azure-controller, langfuse-fips, step-kms-plugin, elastic-agent-fips, crossplane-fips,...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 1.0.314 Vulnerability Details CVEID:CVE-2025-61727 DESCRIPTION: An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 1.0.311 Vulnerability Details CVEID:CVE-2025-61725 DESCRIPTION: The ParseAddress function constructs domain-literal address components through repeated string concatenatio...

Microsoft Azure Connected Machine Agent 安全漏洞

Microsoft Azure Connected Machine Agent is a core component of Microsoft that connects non-Azure servers to the Azure console. There is a security vulnerability present in Microsoft Azure Connected Machine Agent. Attackers can exploit this vulnerability to gain higher privileges...

PT-2026-24327

Name of the Vulnerable Software and Affected Versions Azure Windows Virtual Machine Agent affected versions not specified Azure Arc on Windows affected versions not specified Description A security issue exists in Azure Windows Virtual Machine Agent and Azure Arc on Windows that allows an attacke...

CISOs in a Pinch: A Security Analysis of OpenClaw

Learn about OpenClaw a sovereign agent and how this can be viable for enterprises...

ProvAgent: Threat Detection Based on Identity-Behavior Binding and Multi-Agent Collaborative Attack Investigation

Advanced Persistent Threats APTs pose critical challenges to modern cybersecurity due to their multi-stage and stealthy nature. While provenance-based detection approaches show promise in capturing causal attack semantics, current threat provenance practices face two paradoxical issues: 1 expert...

PT-2026-24233

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 vulnerability in Fortinet FortiSOAR Agent Communication Bridge 1.1.0, FortiSOAR Agent Communication Bridge 1.0 all versions may allow an unauthenticated attacker to read files accessible to the...

EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-1232)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When doing multi-threaded LDAPS transfers LDAP over TLS with libcurl,changing TLS options in one thread would inadvertently change them globally and...

Secure agentic AI for your Frontier Transformation

Today we shared the next step to make Frontier Transformation real for customers across every industry with Wave 3 of Microsoft 365 Copilot, Microsoft Agent 365, and Microsoft 365 E7: The Frontier Suite. Introducing the First Frontier Suite built on Intelligence and Trust As our customers rapidly...

Secure agentic AI for your Frontier Transformation

Today we shared the next step to make Frontier Transformation real for customers across every industry with Wave 3 of Microsoft 365 Copilot, Microsoft Agent 365, and Microsoft 365 E7: The Frontier Suite. Introducing the First Frontier Suite built on Intelligence and Trust As our customers rapidly...

Security Bulletin: IBM Sterling Connect:Direct File Agent is vulnerable to multiple issues due to IBM Semeru Runtime 17

Summary There are vulnerabilities in IBM Semeru Runtime version 17 used by IBM Sterling Connect:Direct File Agent. IBM Sterling Connect:Direct File Agent has addressed the applicable CVEs CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925, CVE-2026-1188. Vulnerability Details...