Docker

Critical Remote Code Execution Flaw Discovered in Flowise MCP Server

RCE Vulnerability in Nginx UI Disclosed

TeamPCP's CanisterWorm Targets Iranian Systems with Destructive Kubernetes Wiper

Pre-Auth RCE Vulnerability in Marimo Exposed

Fedora Skopeo Security Fix for CVE-2025-58189 and CVE-2025-61725

CARBONATO Botnet Exploits Exposed Docker APIs Using AI Agents

Multiple Critical CVEs Exploited in Cybersecurity Attacks

Bitwarden CLI Compromised in Supply Chain Attack via npm

GitLab Issues Urgent Patch for Critical AI Gateway RCE Flaw

Critical SQL Injection Vulnerability in Kestra (CVE-2026-34612)

Docker Patches Critical AuthZ Bypass Vulnerability CVE-2026-34040

LiteLLM Supply Chain Attack Exposes Critical Credentials

Supply Chain Attack Targets Checkmarx KICS Tool via Docker and VSCode Extensions

Anonymous Researcher Publishes Zero-Day Exploits for Major Software Projects

Critical Unauthenticated Path Traversal Vulnerability in WordPress

Vulnerabilities in Zammad Ticketing System Under Active Exploitation

Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros

Critical Flowise RCE Vulnerability Exploited, Thousands of Systems at Risk

Mass Scanning Campaign Targets Exposed Vite Servers for Cloud Credentials

Gitea Docker Authentication Bypass Vulnerability Under Active Exploitation

Critical Docker Vulnerability CVE-2026-17106 Allows Host File Overwrite

Critical DoS Vulnerabilities in Fedora 43 Podman, Buildah, and Skopeo

Critical Arbitrary File Write Vulnerability in Crawl4AI (CVE-2026-56260)

Critical Vulnerabilities in Kaltura HTML5 Player Expose Organizations to Attacks

Critical Exploitation of Dirty Pipe Vulnerability in Docker Environments

Malicious AI Skills Campaign Targets 1.7 Million Users, Exposes Major Vulnerabilities

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP

CVE-2026-72862: OS Command Injection Vulnerability in Dokploy

Critical Vulnerabilities Found in Ruby on Rails ViewComponent Framework

CISA Adds Multiple Exploited Flaws in AI and Networking Tools to KEV Catalog

Critical Sandbox Escape Vulnerability in vm2 Library Disclosed

Supply Chain Attack on node-ipc npm Package Exposes 822K Downloads to Credential Theft

Tor Network Faces Critical Security Flaws Requiring Immediate Updates

Malicious PyPI Package Compromises Developer Data and Cryptocurrency Wallets

Gitea Vulnerability Exposes 30,000 Private Container Images to Attackers

Apache Tomcat Vulnerability CVE-2026-34486 Enables Remote Code Execution

Critical Vulnerabilities in Apache HTTP Server and Ampache Exposed

Codecov Bash Uploader Security Incident Overview

Critical Docker Vulnerabilities Affect Multiple Ubuntu Releases

Docker Hub Fixes Critical Vulnerability Allowing User Impersonation

QNAP Patches Seven Critical Zero-Day Vulnerabilities Following Pwn2Own 2025

Critical ChromaDB Vulnerability Enables Remote Code Execution

A Container Image Can Be Vulnerability

Container Vulnerability Scanning Tools Compared 2026

Trivy Kics And The Shape Of Supply Chain Attacks So Far In 2026

Personal Access Tokens

Docker Hub Security Advisory Cve 2026 105445

News brief: Security flaws put thousands of systems at risk By: Staff report

AI Agent Security: Best Practices for Safe Deployment

Katanemo Plano Envoy Admin Config Secret Disclosure

github.com /0xJacky/nginx-ui/security/advisories/GHSA-p393-cf76-4jmr

1,467, up from the 492 instances

GHSA 8phf V3xj 8jjg

Guide d'utilisation

DB-GPT AI Agent Platform: Two Critical RCE CVEs at the Agent Data Access Layer

Hackers Hijack Tensorlake Package to Spread Shai

github.com /advisories/GHSA-788w-68h3-cvxp

github.com /TryGhost/Ghost/security/advisories/GHSA-788w-68h3-cvxp

GitHub issue #3082

DB-GPT AI Agent Platform: Two Critical RCE CVEs at the Agent Data Access Layer

DB-GPT AI Agent Platform: Two Critical RCE CVEs at the Agent Data Access Layer

The Same AI That Writes Your Code May Be the Worst Reviewer of It

Measuring Attacker/Defender Asymmetry (blog, Sep 2)

github.com /advisories/GHSA-27vj-qcqg-25rc

Passwork’s Standard plan

CVE 2026 61500

CVE 2026 40281 Exploit

Firecracker

Introducing Ftl

GHSA V6q3 Xqxm 6f5v

CVE Alert: CVE-2026-102490 – Zammad GmbH

CVE Alert: CVE-2026-102489 – Zammad GmbH

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self

Read the full report for CVE-2026-92948 on our website

CVE-2026-92948: Sandbox Escape and Remote Code Execution in vm2 via node:test

GHSA Q55r W7fh Rmh6

AI Agents Find RCE Vulnerabilities at Double the Traditional Rate

Milk Dragon: Huge Discounts on Social Media? Think Twice Before You Buy | Group

Carbonato

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

CVE Alert: CVE-2026-87114 – Red Hat

Add Runtime Controls To Ai Agents With Nvidia Openshell

Nvidia OpenShell