Insufficient validation and authentication in the Secure Workload’s REST APIs provide remote attackers with Site Admin privileges.

The post Cisco Patches Critical Vulnerability in Secure Workload appeared first on SecurityWeek.

CVE-2026-9082 can be exploited without authentication for information disclosure, privilege escalation, and remote code execution.

The post Drupal Patches Highly Critical Vulnerability Exposing Websites to Hacking appeared first on SecurityWeek.

More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’.

The post Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI appeared first on SecurityWeek.

New vulnerabilities are being discovered too fast, the time-to-exploitation is too short, and our visibility into them is largely lacking.

The post Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility appeared first on SecurityWeek.