LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Ni

14 CVEs published in the last four months and 12 stories. Exploited flaws first.

Critical2
High12
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-91429.1criticalinstrumentstudioThere is an insecure default credentials vulnerability in NI grpc-device when TLS configuration is not present and 124d ago
CVE-2026-481379.1criticalinstrumentstudioThere is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allo124d ago
CVE-2026-09557.8highdasylabThere is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent D222d ago
CVE-2026-09567.8highdasylabThere is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent D222d ago
CVE-2026-09547.8highdasylabThere is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted DSB file in Digil222d ago
CVE-2026-09577.8highdasylabThere is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent 222d ago
CVE-2026-642017.8highlabviewThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclo57d ago
CVE-2026-642027.8highlabviewThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclo57d ago
CVE-2026-642037.8highlabviewThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclo57d ago
CVE-2026-642047.8highlabviewThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclo57d ago
CVE-2026-481387.5highinstrumentstudioThere is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check tha124d ago
CVE-2026-481397.5highinstrumentstudioThere is a NULL pointer dereference vulnerability in NI grpc-device in the data moniker service that may allow an 124d ago
CVE-2026-80367.1highni-palImproper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potenti141d ago
CVE-2026-80357.1highni-palImproper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of ser141d ago

Filter the full tracker by Ni →

Our coverage of Ni

security

Introducing Clef-omni with full multimodality, plus a faster Clef and a cheaper Clef-flash

Clef, a new multimodal large language model (LLM), has been introduced, offering enhanced capabilities for processing and generating content across various data types. The model is designed to handle text, images, and audio inputs and outputs, marking a significant advancement in multimodal AI.

aicritical

AI Training Critical as Governance Challenges Grow

Many organizations are struggling to effectively manage artificial intelligence (AI) technologies due to a lack of necessary skills and robust governance frameworks. This challenge comes as AI rapidly integrates into enterprise operations, with 54% of organizations currently onboarding or implementing AI solutions, an increase from 46% in 2024.

ai

Companies want autonomous IT operations but hesitate to let AI act alone

Ninety percent of companies anticipate a shift toward autonomous IT operations within the next two years, envisioning agentic AI systems that independently plan and execute multi-step tasks. However, a significant majority, 77 percent, express hesitation in allowing AI to make operational decisions without human approval. This suggests that most organizations currently aim for a model where a…

ai

Lawmakers warn Google could expose Spirit Airlines data in $10 million AI training deal

More than 100 members of Congress have urged Google and Spirit Airlines to halt a proposed $10 million deal that would transfer Spirit's internal data to Google for the purpose of training artificial intelligence models. The lawmakers expressed significant concerns that even with de-identification safeguards, the data could still expose sensitive employee information.

security

Italy’s Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review

Italy's Ministry of Foreign Affairs confirmed on October 8, 2026, that its website was under cyberattack. The ministry stated that its protection systems successfully mitigated the incident, preventing any disruption to its services.

malware

Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones

Recent reports indicate that a new malware strain, dubbed "Midnight Mimosa," has been discovered preinstalled on certain low-cost Android smartphones. This finding suggests that some devices may be compromised with malicious software embedded directly into their firmware before they even reach consumers, posing a significant supply chain security risk.

malware

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

A Russia-aligned threat actor, UAC-0099, has reportedly been observed deploying a new .NET-based infostealer and remote access trojan (RAT) named ASHVEIN. This malware has been specifically used in attacks targeting Ukrainian government personnel. The cybersecurity firm TrendAI is tracking this activity cluster under the designation Earth Sirrush, which was previously known as SHADOW-EARTH-065.

breach

US posts $10 million reward for accused Chinese ‘Hafnium’ hacker

The U.S. State Department has announced a reward of up to $10 million for information leading to the arrest or conviction of Zhang Yu, a Chinese national accused of involvement in the Hafnium hacking campaign. Zhang is alleged to be a central figure in a series of cyberattacks that compromised thousands of computers globally and stole sensitive data, including COVID-19 research.

breach

Major rules for federal contractors handling sensitive data are nearing the finish line

Federal government contractors handling sensitive information are poised for significant new regulations concerning data protection and breach reporting. These forthcoming rules, which define "controlled unclassified information" (CUI) as a category of sensitive data below classified status—including personal information like Social Security numbers and critical infrastructure…

ransomware

Four Compliance Frameworks, One Security Team. How Universities Can Stop Drowning in Regulatory Risk

Universities face a uniquely complex regulatory landscape, often requiring compliance with four distinct federal frameworks simultaneously, each with its own security requirements, reporting timelines, and potential penalties. This challenge is compounded in multi-campus systems where IT environments, tools, staff, and data governance practices may vary by institution. The scale of the threat…

CVE-2026-93836high

Ninja Forms plugin flaw exploited to hack WordPress sites

Cybersecurity researchers have identified an active exploitation campaign targeting two WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, leveraging stored cross-site scripting (XSS) vulnerabilities to compromise websites. The attacks, first observed on October 4 against WPC Product Bundles for WooCommerce users and then on October 5 against Ninja Forms users, involve the…

phishing

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Cybersecurity researchers have uncovered a human-operated phishing platform designed to impersonate advertising portals for popular artificial intelligence (AI) chatbots. The platform specifically targets users by mimicking ad products for services such as Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. Its primary objective is to capture user credentials and…