Maya Nair

CVE-2026-40050 is a critical unauthenticated path traversal flaw in self-hosted LogScale, while SaaS and Next-Gen SIEM customers are in a different position.

A newly exploited flaw in Nginx UI shows how quickly AI-connected management features can turn into a live server risk when core protections are skipped.

A Cisco SD-WAN flaw that was only part of a broader February advisory has become more urgent after CISA flagged it as actively exploited, pushing network teams to revisit internet-facing management setups that may have looked low priority weeks ago.

CISA says attackers are already exploiting the Apache ActiveMQ vulnerability tracked as CVE-2026-34197, turning an old piece of enterprise middleware into another urgent reminder that forgotten infrastructure still creates outsized security risk.

Microsoft has moved Entra passkeys on Windows into public preview, giving organizations a way to use device-bound passkeys on personal and shared PCs without relying on passwords.

Microsoft’s April 6, 2026 research says attackers are scaling device-code phishing with automation and AI-written lures, turning a niche OAuth trick into a more practical account-takeover path.