What FedRAMP requires when a cloud service provider is in a federal agency's supply chain: the FedRAMP Authorization Act (44 ...
What the FTC's GLBA Safeguards Rule (16 CFR Part 314) requires of financial institutions for their service providers: the ...
A hub for the capabilities behind modern third-party risk management - continuous monitoring, attack surface monitoring, ...
What ISO/IEC 27001 Annex A actually requires for supplier relationships: the five controls in clauses 5.19-5.23, how they map ...
The catch: Cursor's revised notice says the extension added the attacker's SSH key, installed persistence and sent host details to the attacker, even where the SSH step failed. These stay after the ...
TL;DR. PwnEscape (CVE-2026-99999) is a Linux kernel flaw in IPv4 packet handling that lets a guest virtual machine attack the host it runs on. The researcher showed it leaking host memory, crashing ...
TL;DR. Drupal rates CVE-2026-118539 in Commerce Core Highly critical (21/25) and says it is being actively exploited in the wild; Rescana treats it as Critical. The flaw lets attackers tamper with ...
CVE-2026-110447 is an unauthenticated OS command injection in Collabora Online - Built-in CODE Server, an optional Nextcloud app with the package name richdocumentscode. Collabora's advisory says a ...
Update (31 October 2026): We updated the vendor-action section at the end of this advisory and added a direct way to talk to a Rescana expert. The technical details, severity scores, vendor fix status ...
On 28 October 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-46300, a Linux kernel flaw known as "Fragnesia", to its Known Exploited Vulnerabilities (KEV) catalog, ...
On 27 October 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-48356, a file upload flaw in Adobe Commerce and Magento Open Source, to its Known Exploited ...
On 29 October 2026, Progress Software published CVE records for two critical vulnerabilities in WS_FTP Server, its Windows file transfer server. CVE-2026-84295 is an improper authentication flaw that, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results