Source profile
securityweek.com
A field appears only when the current profile revision carries supporting evidence. Missing context stays visibly unknown.
CERT Polska says CVE-2026-73570 is under active exploitation. The fix shipped on July 20, and whether SNMP notifications are enabled, not the version string alone, sets the blast radius.
Perspective Coverage
3 publishersReality
Three of the Crosswork flaws score a flat 10.0, and Cisco says each CVE bundles several underlying defects. No exploitation reported in the wild so far.
Reality
A six-day intrusion in one AWS environment exposed SSNs, driver's license numbers and, for a subset, full payment card data. The federal tally rose tenfold this week.
Perspective Coverage
3 publishersReality
Fortinet says the price was immaterial to its business. For teams budgeting a standalone AI red-teaming and guardrails tool, that is the number that matters.
Reality
The FBI is investigating how the hire happened, and SecurityWeek reports it was probably a contract job. The same roundup carried Rapid7 cutting 314 jobs under a new CEO.
Reality
A logistics contractor's intrusion stopped shipments and exposed customer delivery data at Bol, De Bijenkorf, ING and Valve. None of them were breached themselves.
Reality
CVE-2026-55040 was patched in July. Rapid7 published the technical details and a script on August 11, and Defused says its honeypots logged exploitation on August 12.
Reality
SOCRadar's record-level data puts 95 percent of identified victims before the poisoned LiteLLM packages ever hit PyPI. Anyone who rotated only what LiteLLM touched is still exposed.
Reality
Forty-two Intel advisories cover privilege escalation in Xeon, TDX and CSME/SPS, plus medium-severity bugs across a wide set of AI and ML packages. AMD's five advisories add twelve more.
Reality