What ISO/IEC 27001 Annex A actually requires for supplier relationships: the five controls in clauses 5.19-5.23, how they map ...
TL;DR. PwnEscape (CVE-2026-99999) is a Linux kernel flaw in IPv4 packet handling that lets a guest virtual machine attack the host it runs on. The researcher showed it leaking host memory, crashing ...
What FedRAMP requires when a cloud service provider is in a federal agency's supply chain: the FedRAMP Authorization Act (44 ...
A hub for the capabilities behind modern third-party risk management - continuous monitoring, attack surface monitoring, ...
TL;DR. Drupal rates CVE-2026-118539 in Commerce Core Highly critical (21/25) and says it is being actively exploited in the wild; Rescana treats it as Critical. The flaw lets attackers tamper with ...
The catch: Cursor's revised notice says the extension added the attacker's SSH key, installed persistence and sent host details to the attacker, even where the SSH step failed. These stay after the ...
On 28 October 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-46300, a Linux kernel flaw known as "Fragnesia", to its Known Exploited Vulnerabilities (KEV) catalog, ...
Update (31 October 2026): We updated the vendor-action section at the end of this advisory and added a direct way to talk to a Rescana expert. The technical details, severity scores, vendor fix status ...
On 29 October 2026, Progress Software published CVE records for two critical vulnerabilities in WS_FTP Server, its Windows file transfer server. CVE-2026-84295 is an improper authentication flaw that, ...
On 28 October 2026, SignalWire, the maintainer of the open-source FreeSWITCH telephony platform, published advisory GHSA-mg63-h38w-8p9p for CVE-2026-116779 (SignalWire GHSA-mg63-h38w-8p9p). A single ...
On 22 October 2026, TianoCore, the project that maintains EDK II, published an advisory for CVE-2026-97631, a buffer overflow in the network boot (PXE) driver of EDK II (TianoCore GHSA-99cj-7hg9-mp4m) ...
On 26 October 2026 Apple released iOS 18.7.11 and iPadOS 18.7.11, bringing its fix for CVE-2026-86950 to older devices that cannot run newer versions, including iPhone XS, iPhone XS Max, iPhone XR and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results