What FedRAMP requires when a cloud service provider is in a federal agency's supply chain: the FedRAMP Authorization Act (44 ...
A hub for the capabilities behind modern third-party risk management - continuous monitoring, attack surface monitoring, ...
The catch: Cursor's revised notice says the extension added the attacker's SSH key, installed persistence and sent host details to the attacker, even where the SSH step failed. These stay after the ...
On 29 October 2026, Progress Software published CVE records for two critical vulnerabilities in WS_FTP Server, its Windows file transfer server. CVE-2026-84295 is an improper authentication flaw that, ...
On 28 October 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-46300, a Linux kernel flaw known as "Fragnesia", to its Known Exploited Vulnerabilities (KEV) catalog, ...
On 27 October 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48356, a file upload flaw in Adobe Commerce and Magento Open Source, to its Known Exploited ...
TL;DR. PwnEscape (CVE-2026-99999) is a Linux kernel flaw in IPv4 packet handling that lets a guest virtual machine attack the host it runs on. The researcher showed it leaking host memory, crashing ...
Update (2 November 2026): Red Hat released fixed kernels for Red Hat Enterprise Linux 8, 9 and 10 on 1 November 2026 and raised its own score to CVSS 3.1 9.8, Critical. Amazon Linux 2 and the Amazon ...
The breach targeting PwC originated from a compromise of a third-party vendor hosting employee learning records. The Everest group, active since at least December 2020, is known for leveraging a ...
TL;DR. Drupal rates CVE-2026-118539 in Commerce Core Highly critical (21/25) and says it is being actively exploited in the wild; Rescana treats it as Critical. The flaw lets attackers tamper with ...
A third-party risk program is easier to build, and to defend to an auditor, when the underlying concepts are kept distinct. Risk is not the same as criticality. A score is not the same as a decision.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results