News Archives

Exposed Endpoints and the Rising Risk in LLM Infrastructure

As organizations deploy more Large Language Models, the services and APIs that support them expand the attack surface. Exposed LLM endpoints, excessive permissions and long-lived credentials create a growing security risk that demands endpoint privilege management and zero-trust controls.

February 24, 2026

CISA Lists Two Actively Exploited Roundcube Vulnerabilities in KEV Catalog

CISA has added two Roundcube vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog after evidence of active exploitation. Details on the CVEs, fixes, and remediation deadlines for federal agencies are summarized.

February 23, 2026

Anthropic Debuts Claude Code Security for AI-Driven Vulnerability Scanning

Anthropic has introduced Claude Code Security, an AI-driven tool that inspects codebases for vulnerabilities, recommends fixes for human review, and is available as a limited research preview to Enterprise and Team customers.

February 23, 2026

BeyondTrust Flaw Used for Web Shells, Backdoors, and Data Exfiltration

Threat actors are actively exploiting a critical BeyondTrust vulnerability (CVE-2026-1731) in Remote Support and Privileged Remote Access appliances to deploy web shells, backdoors, remote management tools, malware, and to steal data, according to Palo Alto Networks Unit 42. CISA has added the flaw to its Known Exploited Vulnerabilities list.

February 23, 2026

Microsoft fixes CVE-2026-26119 privilege-escalation bug in Windows Admin Center

Microsoft patched a high-severity privilege escalation bug (CVE-2026-26119) in Windows Admin Center. The flaw, rated 8.8 CVSS, was reported by Semperis researcher Andrea Pierini and fixed in WAC v2511 released December 2025.

February 19, 2026

INTERPOL Operation Red Card 2.0: 651 Arrested and More Than $4.3M Recovered in Pan‑African Cybercrime Sweep

INTERPOL-led Operation Red Card 2.0 arrested 651 people across 16 African nations, recovered over $4.3M, and disrupted large-scale online investment, mobile money and loan fraud.

February 19, 2026