NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Cisco Confirms Active Exploitation of Unified CM SSRF Flaw
Cisco has formally acknowledged that attackers are actively exploiting CVE-2026-20230, a server-side request forgery vulnerability in Unified Communications Manager patched in early…
CISA Warns of Auth Bypass and CSRF Flaws in iDirect Satellite Terminals
Two high-severity vulnerabilities in ST Engineering iDirect iQ-Series terminals could expose sensitive satellite credentials and allow unauthenticated denial-of-service attacks. Patches are available…
CISA Warns of Critical Hardcoded Credential Flaw in Gardyn IoT Hub
Three vulnerabilities in Gardyn's IoT Hub platform, including a CVSS 10 hardcoded credential bug, could let unauthenticated attackers access and control connected…
CISA Advisory: CubeSpace Reaction Wheel Vulnerable to Unsigned Firmware Upload
A missing cryptographic signature check in CubeSpace CW0057 Reaction Wheel firmware lets a physically present attacker flash arbitrary firmware. A patch is…
Microsoft Patches Vanishing Copilot Buttons in Classic Outlook
A service-side fix deployed June 29 restores missing Copilot UI elements for Classic Outlook users on the Copilot Chat (Basic) license. A…
Google Loses Final EU Appeal, €4.1 Billion Android Antitrust Fine Stands
The Court of Justice of the European Union has dismissed Google's final appeal against a €4.1 billion antitrust fine, concluding an eight-year…
CitrixBleed-Style NetScaler Flaw Exploited Within 24 Hours of Disclosure
A newly disclosed memory-disclosure vulnerability in NetScaler ADC and Gateway drew active exploitation attempts less than a day after Citrix released patches…
Supreme Court Ruling Puts EU-US Data Privacy Framework at Risk
A U.S. Supreme Court decision allowing presidents to fire FTC commissioners without cause has undermined a core pillar of the EU-US Data…
Google Loses Final EU Appeal, Owes €4.1 Billion in Android Antitrust Fine
The Court of Justice of the European Union has dismissed Google's last appeal against a €4.1 billion antitrust fine, affirming that Android…
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Adobe released security updates for ColdFusion and Campaign Classic addressing 12 vulnerabilities, including seven rated at maximum severity with CVSS scores of…
Supreme Court Ruling Puts EU-US Data Privacy Framework at Risk
A U.S. Supreme Court decision allowing presidents to fire FTC commissioners at will has triggered legal threats against the EU-US Data Privacy…
SimpleHelp Auth Bypass Exploited to Drop TaskWeaver and Djinn Stealer
Attackers are actively exploiting a maximum-severity authentication bypass in SimpleHelp to deliver two newly identified malware families, with the infostealer component targeting…