Search: “Visual Concepts”

64 stories

Google's August 2026 AI recap includes launches of Gemini 3.7 Flash, Gemini 3.5 Transcribe, and the Pixel 11 series, plus 1 billion Gemini users.

Google's monthly recap covers the Gemini 3.7 Flash workhorse model for coding and agents, released three weeks after 3.6 Flash at half its per-million-token cost, and the Gemini app surpassing 1 billion monthly users. The Pixel 11 series launched with the Tensor G6 chip running Gemini Nano, alongside Gemini 3.5 Transcribe for real-time speech-to-text and Gemini Omni 1.1 Flash for studio-quality video generation. Other announcements include a free year of Google AI for college students, Gemma's 1 billion downloads, and AI weather forecasts for aviation contrail reduction.

Google · AISep 1, 20:45 UTC · 14d agoAI industry

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year

The Hacker NewsApr 9, 16:23 UTC · Apr 9, 2026Malware CVE-2024-32114 CVE-2026-34197 CVE-2022-416781

Microsoft Releases Patches for 74 New Vulnerabilities in August Update

The Hacker NewsAug 10, 03:31 UTC · Aug 10, 2023Vulnerability in the wildCVE-2023-20569 CVE-2023-36884 CVE-2023-35388+8 CVEs

Kaspersky ransomware report for 2024

Kaspersky SecurelistMay 7, 10:00 UTC · May 7, 2025Ransomware

ChaosSearch Data Platform now available in AWS marketplace

Help Net SecurityApr 20, 08:51 UTC · Apr 20, 2026Exploit / PoC

Atlassian fixed maximum severity flaw CVE-2025

Security AffairsDec 15, 15:03 UTC · Dec 15, 2025Exploit / PoC CVE-2025-66516 CVE-2025-54988 CVE-2021-39227+1 CVEs

CISA adds three Microsoft Patch Tuesday bugs to vulnerability list

The RecordNov 15, 04:19 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36033 CVE-2023-36025 CVE-2023-36036

CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation

The Hacker NewsAug 11, 03:38 UTC · Aug 11, 2023Exploit / PoC in the wildCVE-2023-38180

Addressing the vulnerability prioritization challenge

Recorded FutureNov 26, 00:00 UTC · Nov 26, 2025Vulnerability in the wild

Red Hat announces enhancements across its portfolio of open hybrid cloud solutions

Help Net SecurityMay 12, 00:00 UTC · May 12, 2022Exploit / PoC

PoC released for CVE-2020

Security AffairsJul 23, 16:37 UTC · Jul 23, 2020Exploit / PoC CVE-2020-1147

MS Office Built-in Feature Allows Malware Execution Without Macros Enabled

The Hacker NewsOct 12, 11:06 UTC · Oct 12, 2017Malware in the wild

Critical Security Patches Issued by Microsoft, Adobe and Other Major Software Firms

The Hacker NewsMar 10, 13:47 UTC · Mar 10, 2022Vulnerability in the wildCVE-2022-22006 CVE-2022-23277 CVE-2022-24501+3 CVEs

Yellow Pencil WordPress Plugin flaw expose tens of thousands of sites

Security AffairsAug 28, 11:49 UTC · Aug 28, 2023Exploit / PoC

Zero-Day and Six Publicly Disclosed CVEs Fixed by Microsoft

Infosecurity MagazineFeb 10, 09:33 UTC · Feb 10, 2021Exploit / PoC in the wildCVE-2021-1732 CVE-2021-24078 CVE-2021-1733+5 CVEs

Hackers Exploit Critical Langflow Bug in Just 20 Hours

Infosecurity MagazineMar 20, 10:20 UTC · Mar 20, 2026Ransomware in the wildCVE-2026-330171

Prioritizing Cyber Threats: Addressing the Overload Challenge

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Exploit / PoC

SCYTHE 4.3 enables organizations to test and validate their defenses

Help Net SecurityJul 1, 00:00 UTC · Jul 1, 2024Exploit / PoC

New Flodrix Botnet Variant Exploits Langflow AI Server RCE Bug to Launch DDoS Attacks

The Hacker NewsJun 21, 09:10 UTC · Jun 21, 2025Vulnerability in the wildCVE-2025-3248

March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-day

Help Net SecurityJun 8, 18:28 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-26411 CVE-2021-27076 CVE-2021-26867+1 CVEs

Analyzing Attack Vector Trends by Industry, Country, and More

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Data breach CVE-2015-5122 CVE-2015-5123 CVE-2015-5119+1 CVEs

Microsoft Patch Tuesday for September 2023 — Unusually low 5 critical vulnerabilities included in Microsoft Patch Tuesday, along with two zero

Cisco TalosSep 12, 22:02 UTC · Sep 12, 2023Vulnerability in the wildCVE-2023-36756 CVE-2023-36802 CVE-2023-36761+7 CVEs1

October Patch Tuesday Addresses Three Zero

Infosecurity MagazineOct 11, 10:30 UTC · Oct 11, 2023Vulnerability in the wildCVE-2023-41763 CVE-2023-36563 CVE-2023-44487+8 CVEs1

CVEMap: Open-source tool to query, browse and search CVEs

Help Net SecurityMar 25, 17:03 UTC · Mar 25, 2024Exploit / PoC in the wild

Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs

The Hacker NewsJun 26, 13:53 UTC · Jun 26, 2026Exploit / PoC CVE-2026-12957 CVE-2026-12958 CVE-2025-59536+2 CVEs

Langflow Remote Code Execution Vulnerability Exploited in Attacks (CVE-2026-0768)

Critical CVSS 9.8 RCE CVE-2026-0768 in Langflow is under active exploitation, with attackers probing for credentials and secrets.

CVE-2026-0768, a critical (CVSS 9.8) remote code execution flaw in Langflow's code validator, lets attackers execute Python code with root privileges via the validate endpoint's code parameter. VulnCheck honeypots in the UK detected Russian-origin exploitation performing reconnaissance and credential harvesting, querying environment variables like LANGFLOW_SUPERUSER and AWS keys and reading Langflow's secret key. Versions before 1.4.2 are affected; no vendor advisory or public PoC was available at reporting time.

Qualys ThreatPROTECTSep 2, 16:12 UTC · 13d agoExploit / PoC in the wildCVE-2026-0768 CVE-2026-33017 CVE-2026-5027+1 CVEs1

Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)

Help Net SecurityNov 26, 13:25 UTC · Nov 26, 2024Exploit / PoC in the wildCVE-2024-43451 CVE-2024-49039 CVE-2024-43639+3 CVEs

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded Future's Insikt Group identified 73 high-impact vulnerabilities in August 2026, 43 rated Very Critical, spanning 45 vendors with Microsoft accounting for roughly 11%. 31 vulnerabilities surfaced via CISA's KEV catalog, with others validated via open sources, vendor telemetry, and honeypot data. New Nuclei detection templates were released for CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). The report also highlights two AI-assisted operations: UAT-10147 exploited Zimbra, AjaxPro, Nacos, and Telerik servers before using DeepAudit and PentestGPT post-compromise, while a separate Chinese-speaking actor weaponized Hermes Agent and DeepSeek in a failed attempt.

Recorded FutureSep 8, 00:00 UTC · 8d agoVulnerability in the wildCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+4 CVEs