vulnerability disclosure news
2 stories
CVE-2026-102489critical
Two Zero-Days Exploited in Attack on Dutch Institute for Vulnerability Disclosure
The Dutch Institute for Vulnerability Disclosure (DIVD), a cybersecurity non-profit, recently disclosed that it was compromised in an attack that exploited two zero-day vulnerabilities in its Zammad helpdesk platform. The incident, detected on September 24, involved the use of what DIVD describes as an "agentic AI" to execute the attack.
CVE-2026-28739high
Multiple Vulnerabilities Found in WolfSSL, GeoVision, and VTK-DICOM
Multiple vulnerabilities have been identified and patched in WolfSSL, GeoVision, and VTK-DICOM, according to a recent disclosure by Cisco Talos. The vulnerabilities, discovered by the Talos Vulnerability Discovery & Research team, have all been addressed by their respective vendors in accordance with Cisco's disclosure policy.