LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Alf

1 CVEs published in the last four months and 5 stories. Exploited flaws first.

Critical0
High1
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-354828highalfalf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups.133d ago

Filter the full tracker by Alf →

Our coverage of Alf

malwarehigh

TerminalFix campaign deploys a reverse tunnel through multistage intrusion

A new cyber campaign, dubbed TerminalFix, has been reported to be actively targeting organizations through a sophisticated, multi-stage intrusion process. This campaign, identified as a variant of the previously known ClickFix operation, primarily relies on social engineering to initiate the attack chain, specifically by deceiving users into executing malicious PowerShell commands. The initial…

patch

Nearly half of enterprises have no one leading PQC migration

A new report indicates that nearly half of enterprises lack a designated leader for their post-quantum cryptography (PQC) migration efforts, despite a general belief among organizations that they are prepared for the security implications of quantum computing. The research, conducted by Axiad, highlights potential gaps in ownership, testing, and visibility that could complicate the transition…

vulnerability

More than half of AI-generated patches are broken

New research indicates that large language models (LLMs) are more likely to introduce new vulnerabilities or create exploitable patches than to fully resolve security flaws. Two independent studies found that AI-generated security patches often fail to completely remediate vulnerabilities, with success rates falling below 50% in some tests.

vulnerability

AI-Generated Patches Fail Half the Time

A recent study examining over 6,000 AI-generated software patches has revealed a significant failure rate, with approximately half of these automated fixes either failing to resolve the original issue, introducing new vulnerabilities, breaking existing functionality, or being susceptible to bypass. This finding suggests that while AI holds promise for accelerating the patching process, its…

security

US fuel gauge exposure fell by more than half in three months

The number of internet-exposed automatic tank gauges (ATGs) in the United States, which monitor fuel levels and other critical parameters, decreased by more than half over a three-month period, following advisories about suspected nation-state attacks. Between March and June, the count of unique IPv4 addresses responding to ATG protocol queries on the internet fell by 56 percent, from a peak…