Company
Cybersecurity company best known for its password and secrets management platform used by businesses and consumers to store and share credentials.
Members of Congress have introduced at least three bills since late July to keep AI systems under human shutdown control. The duty sits with model developers, while a switch-off would disrupt the companies whose workflows run on those models.
Reality
CVE-2026-73749 lets an unauthenticated attacker run privileged code on HPE Aruba switches by sending malformed packets to a daemon the bulletin never names. The oldest affected branch is already out of maintenance.
Perspective Coverage
3 publishersReality
GitGuardian's 2026 State of Secrets Sprawl Report says commits identified as AI-assisted leak secrets at about twice the rate of human-written ones. Agent and MCP config files also keep plaintext keys on developer machines where commit scanning and code review never look.
Reality
A default self-hosted Artifactory install trusted an empty string as a join key. Because JFrog supports non-expiring tokens, an upgrade can leave a forged administrator token valid.
Reality
The bug lets files be pushed and executed through a remote session the host already approved, and CISA says attackers are doing it now. It is ScreenConnect's fourth entry on the KEV catalog since 2024.
Reality
Amendments tabled two days after a reported four-day outage at a UK energy generator would let ministers block specific suppliers, which turns vendor provenance into something a critical-sector buyer has to prove.
Reality
OpenAI says the model never sees your password. BeyondTrust's Morey Haber told ZDNet that misses the point, because once the session exists an attacker can work inside it with all of your entitlements.
Reality