Largest Patch Tuesday 569 CVEs
56Critical 510Important 3Moderate 0Low Microsoft addresses 569 CVEs in the largest Patch Tuesday release yet. This month’s release includes three zero-days, two of which were exploited in the wild. Microsoft…
-
-
AI Agents Are Creating a New Class of Employee Risk
Varonis security brief As AI becomes more autonomous, security shifts from controlling access to controlling actions and intent. Organizations need a data-centric security layer that enforces policy, reduces risk, and…
-
Patch Tuesday – July 2026
CVE-2026-50316 Windows Kernel Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability Exploitation Unlikely No 3.3 CVE-2026-50463 Windows Kernel Information Disclosure Vulnerability Exploitation Less Likely…
-
How AI services power the DPRK’s IT contracting scams
Over the past few months, Okta Threat Intelligence conducted in-depth research into online services used by individuals identified by US authorities and trusted third parties as agents for the Democratic…
-
A broken DNSSEC rollover took down .AL. Now 1.1.1.1 tells you when validation is bypassed
On July 3, 2026, the Albanian communications authority (AKEP), the operator of the .AL country-code top-level domain (TLD) of Albania, attempted a DNSSEC key rollover. Something went wrong, resulting in…
-
Weekly Threat Bulletin – July 15th, 2026
CVE-2026-50656: Windows Defender Patch Introduces Disk Exhaustion Vulnerability A recent patch for the Windows Defender zero-day vulnerability, RoguePlanet (CVE-2026-50656), which previously allowed remote administrative control of Windows 10 and 11,…
-
AI incidents need a new playbook. Here’s how to build one
Then there is the hybrid case, which carries the most legal exposure right now. Hallucinations are model-originated but they land in court like human errors. When Air Canada’s chatbot invented…
-
How Cato Turns Identity Noise Into High-Confidence Detections
Jeremy, the Head of IT, thought it was a normal Monday until his help desk was overwhelmed with login complaints. 37 employees couldn’t log in. Password resets were happening that…
-
HTTP/1.1 must die: Dafydd Stuttard on what this means for enterprise security
Andrzej Matykiewicz | Thursday, 9 October 2025 at 14:06 UTC At Black Hat USA 2025 and DEF CON 33, PortSwigger’s Director of Research, James Kettle, unveiled new HTTP desync techniques…
-
Rapid7 and Mindware Partner Across the Middle East
Gopan Sivasankaran is Regional Director, Middle East & Africa, at Rapid7 From AI adoption and cloud-first strategies to smart cities and critical infrastructure modernization, organizations across the United Arab Emirates…
