Tag
CVE-2026-20253 is the first Splunk vulnerability ever added to CISA's KEV catalog: an unauthenticated RCE via the PostgreSQL sidecar. Here is the version matrix, the temporary workaround, and an hour-by-hour SOC runbook.
Manu Shukla 
N-able's N-central hotfix closes an authentication bypass that was exploited as a zero-day from 31 July 2026. It does not remove the tunnel service the attacker registered on your managed endpoints. Here is the order
Manu Shukla 
The Cyber Jailbreak Severity scale gives AI jailbreaks what CVSS gave software bugs in 2005: a number everyone argues about instead of arguing about words. Here is how to score one, and what your team does at each band.
Manu Shukla 
A hijacked maintainer account pushed Shai-Hulud malware into the keyv and cacheable npm family on 4 August 2026, with valid GitHub Actions provenance. Here is the containment order for the first 90 minutes.
Manu Shukla 
Two unauthenticated SharePoint Server RCEs, CVE-2026-50522 and CVE-2026-58644 (both CVSS 9.8), are exploited in the wild. Patching alone will not evict an attacker who stole your machine keys.
Manu Shukla 
On 27 July 2026 NVIDIA and 36 partners launched the Open Secure AI Alliance and open-sourced NOOA, days after closed APIs blocked forensics in the Hugging Face breach. A guide to open vs closed AI-agent security.
Manu Shukla 
Unit 42 found AI accelerated attacks 4x in 2026, with the fastest intrusions reaching data in 72 minutes and identity behind nearly 90% of breaches. Here is what changed and how CTOs and security leaders should respond.
Manu Shukla 