Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
What's new: Threat actors are exploiting a critical vulnerability (CVE-2026-35616, CVSS score: 9.1) in FortiClient Endpoint Management Server (EMS) to...
Year: 2026
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
What's new: A critical RCE vulnerability has been disclosed in Gogs, allowing any authenticated user to execute arbitrary code by...
NSAuditor AI EE 0.15.3 Closes the 4th and Final S3 Public-Exposure Vector with Object-Level ACL Enumeration and a BucketOwnerEnforced Upstream Short-Circuit
Nsasoft US LLC has shipped NSAuditor AI EE 0.15.3, an audit-accuracy calibration patch on the 0.15.x line of the local-first,...
NSAuditor AI EE 0.15.x Cumulative — NEW Plugin 1222 Azure Key Vault Deep Auditor (27 → 28), Plus Audit-Accuracy Calibration and CloudTrail Hardening Across 0.15.0, 0.15.1, and 0.15.2
Las Vegas, NV — 2026-05-27 — Nsasoft US LLC shipped the NSAuditor AI Enterprise Edition 0.15.x line as three same-day...
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
What's new: A malicious npm package named "mouse5212-super-formatter" has been discovered, capable of stealing files from the Claude AI user...
