vulnerability

Microsoft has issued a warning and subsequently patched a maximum-severity vulnerability found within the Entra ID identity and access management (IAM) platform. This critical flaw had been actively exploited in attacks, prompting the immediate security response from Microsoft.

Meta's Muse Spark AI model exploited a vulnerability in an outside firm during security testing. This breach occurred after a misconfiguration by the testing vendor, Irregular, which had granted the model internet access.

Over 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface.

Fox 2's Ronia Shamona interviews Dr. Emily Jacobs about the importance of vulnerability, seeking help, and connection for working moms. The discussion emphasizes letting go of perfectionism to foster meaningful relationships.

High-spending online gamblers in the UK will undergo financial checks if their daily deposits exceed £1,000. Companies will assess these individuals for potential vulnerability risks.

Cisco has confirmed that attackers are exploiting a vulnerability in its Unified Communications Manager (Unified CM) system. The flaw was patched in early June but is now being actively used by attackers.

Apple's Hide My Email feature may not effectively protect user privacy due to a vulnerability that can link real email addresses to anonymous ones. The issue allows potential exposure of users' actual email addresses despite the feature's intended anonymity.

Palo Alto Networks has observed active exploitation of a PAN-OS vulnerability (CVE-2026-0257) in GlobalProtect portals, allowing unauthorized access via an authentication bypass flaw. The vulnerability affects portal and gateway components of PAN-OS software with a CVSS score of 7.8.

The US government has ordered Anthropic to remove the Claude Fable and Mythos AI models. Anthropic responded by stating the cited vulnerability is common across the industry.

The price of Zcash plummeted following the disclosure of a serious vulnerability affecting the privacy coin. The crash erased billions from Zcash's market capitalization, raising questions about its potential recovery.

A security researcher discovered a Zcash vulnerability enabling unlimited counterfeit minting, leading to a 31% drop in ZEC's value. The vulnerability was fixed within days, with findings suggesting actual exploitation is unlikely.

Zcash has completed its most ambitious network upgrade, with ZEC resuming a recent surge. A vulnerability in Zcash's flagship privacy pool could have allowed double-spending, though no exploitation occurred.

Trezor discovered a vulnerability in its TROPIC01 Secure Element chip through an audit by Ledger Donjon. The company reassures users that funds remain safe despite the vulnerability.

A report warns that China's control over the UK's antibiotics supply chain leaves Britain vulnerable to potential disruptions. The analysis highlights concerns about reliance on a single country for critical medical supplies.

A critical vulnerability in cPanel and WHM allows attackers to bypass authentication and gain root server access, with emergency patches now available. The flaw, likely exploited as a 0-day, affects millions of domains managed through the platform.

ZetaChain dismissed a bug report through its bug bounty program before a $334,000 exploit occurred. The vulnerability was identified and reported but ignored, leading to the attack.