News that matters, without the noise.

Browser Security: Zero-Days Are Only Part of the Problem

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn

CVE-2026-9132

Medium Severity Description A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user

CVE-2026-9106

Medium Severity Description A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application

DSA-6374-1 nginx – security update

https://security-tracker.debian.org/tracker/DSA-6374-1

RHSA-2026:33632: Low: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.

RHSA-2026:33635: Low: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat

RHSA-2026:33633: Low: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.

RHSA-2026:33634: Low: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat

A Defining Moment in Identity Security

Artificial intelligence (AI) is changing the enterprise faster than most security models were built to handle. In just

USN-8486-1: libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled the sftp_symlink() function. A malicious SSH server or machine-in-the-middle attacker could

​​What’s new in Microsoft Security: June 2026

As organizations scale AI and agents across environments, security teams need protection that covers every surface. The Microsoft