2025 Talos Year in Review: Speed, scale, and staying power

The 2025 Talos Year in Review is now available to view online. The pace and scale of adversary activity in 2025 placed sustained pressure on security teams across industries. As with each annual report, our goal at Talos is to provide the security community with a clear analysis of the tactics,...

CVE-2026-32735 Unpacking Arbitrary Mustache Template Files via `maven-dependency-plugin`

openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications. Starting in version 5.1.1 and prior to version 5.5.1, the parent POM file of this project openapi-to-java-records-mustache-templates-parent, which is used to centralize plugin...

Mining the YARA Ecosystem: From Ad-Hoc Sharing to Data-Driven Threat Intelligence

YARA has established itself as the de facto standard for "Detection as Code," enabling analysts and DevSecOps practitioners to define signatures for malware identification across the software supply chain. Despite its pervasive use, the open-source YARA ecosystem remains characterized by ad-hoc...

GHSA-XX6G-43W2-9G6G OliveTin's email argument makes compliance harder, enables log injection

Summary The typeSafetyCheckEmail function in service/internal/executor/arguments.go calls log.Errorf on every invocation including when validation succeeds err == nil. This means every email address submitted by any user is written to the application's ERROR-level log unconditionally. Because the...

OliveTin's email argument makes compliance harder, enables log injection

Summary The typeSafetyCheckEmail function in service/internal/executor/arguments.go calls log.Errorf on every invocation including when validation succeeds err == nil. This means every email address submitted by any user is written to the application's ERROR-level log unconditionally. Because the...

Lockbox -- a Zero Trust Architecture for Secure Processing of Sensitive Cloud Workloads

Enterprises increasingly rely on cloud-based applications to process highly sensitive data artifacts. Although cloud adoption improves agility and scalability, it also introduces new security challenges such as expanded attack surfaces, a wider radius of attack from credential compromise, and...

N8N: Shared Credentials and Account Takeover

Executive Summary We identified a security weakness in n8n’s credential management layer that could have completely compromised the application’s security. This finding highlights the core risks of centralized authentication in workflow automation platforms. As n8n serves as the central hub...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, related to insufficient protection of operational data, allows a hacker to disclose protected information.

The vulnerability of the centralized network management system, Cisco Catalyst SD-WAN Manager, is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by this system...

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager, due to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the centralized network management system Cisco Catalyst SD-WAN Manager is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by sending specially crafted...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.9.2 security update

The multicluster engine for Kubernetes 2.9 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.9 images The multicluster engine for Kubernetes provides the foundational components that are...

Important: Red Hat Security Advisory: Red Hat multicluster global hub 1.4.4 security update

Red Hat multicluster global hub v1.4.4 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...

The vulnerability of the Search and Discovery functions in Hikvision’s network video recorder (NVR), digital video recorder (DVR), centralized video recorder (CVR), and IP camera (IPC) software systems allows a intruder to trigger a service failure.

The vulnerability of the Search and Discovery functions in Hikvision’s network video recorder NVR, digital video recorder DVR, centralized video recorder CVR, and IP camera IPC devices is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a servi...

Hitachi SuprOS security vulnerabilities

Hitachi SuprOS is a centralized management system for power distribution automation and communication devices developed by Hitachi, a Japanese company. Hitachi SuprOS has a security vulnerability, which stems from the presence of default credentials. This vulnerability could allow authenticated...

Moderate: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.1 security update

The multicluster engine for Kubernetes 2.10 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that a...

The vulnerability of the software for centralized logging, analysis, and storage of logs by Graylog, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the Graylog log collection, analysis, and storage software lies in the deficiencies of the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of the centralized management system, Multi-Stack Controller (MSC), related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.

The vulnerability of the centralized management system, Multi-Stack Controller MSC, is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the centralized battery management system (BMS) is related to insufficient protection of registration data, allowing a perpetrator to replace the cryptographic signature.

The vulnerability of a centralized battery management system BMS is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to replace the cryptographic signature...

The vulnerability of the centralized management system, Multi-Stack Controller (MSC), related to bypassing authentication by using an alternative path or channel, allows attackers to circumvent existing security mechanisms.

The vulnerability of the centralized management system, the Multi-Stack Controller MSC, relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent existing security mechanisms remotely...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.4 security update

The multicluster engine for Kubernetes 2.8 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.8 images The multicluster engine for Kubernetes provides the foundational components that are...

6 Best Enterprise Security Platforms for 2026

If your security stack feels like a cluttered garage full of single-purpose tools, you’re not alone. You have one tool for endpoints, another for the network, and a few more for the cloud—none of which communicate effectively. This patchwork approach creates dangerous blind spots and buries your...