Enterprise Technology Records

Imprivata Enterprise Access Management versions 26.2.6 and below do not rotate its RSA key pair, enabling CVE-2026-82356 impersonation.

OneLayer was named in two Gartner 2026 publications covering private 5G for AI outcomes and AI security in enterprise communication services.

MLflow dspy and statsmodels flavors can bypass a pickle deserialization safety control, enabling remote code execution under specific model loading conditions.

ESPanix deployed Nokia Deepfield Defender to add optional in-network DDoS detection and mitigation across its Madrid and Barcelona exchanges.

AOMEI Backupper 8.4.0 amwrtdrv.sys incorrect permissions flaw lets local users write physical disk sectors and inject UEFI payloads with Secure Boot disabled.

Netcraft said five more top U.S. financial institutions selected its digital risk protection services and it reached 4.1 million 2026 takedowns.

Zscaler launched Zscaler Agentic SOC to unify exposure management and SOC workflows using Zscaler telemetry, mesh network, and AI agents.

Proofpoint introduced the Proofpoint SOC Analyst Agent, using OpenAI Daybreak models to support security investigations using Proofpoint security data.

Reco Browser Guard entered general availability, inspecting browser prompts and agent actions using user and business context.

Unisys integrated Microsoft Security Copilot capabilities into its Managed Detection and Response (MDR) offering, delivering AI-assisted threat detection, investigation, and response across hybrid

ISC2 will add ACTion Rooms to the 2026 Security Congress in Denver Oct. 24-28, with six facilitated discussion sessions for attendees.

Kaltura html5lib mwEmbedLoader.php has flaws in unsafe deserialization that enable arbitrary file read and remote code execution (CVE-2026-19912/19913).

Calix GS7 XGS GS5239XG EXOS/6.6.47 has an unauthenticated UPnP WANIPConnection flaw on TCP 5000, enabling NAT mapping changes.

Cribl acquired Radiant Security AI SOC technology to autonomously triage, investigate, and resolve alerts using its telemetry platform.

Apiiro joined Chainguard-led Athena and integrated platforms, making AutoFix free for open source maintainers.

Synack Red Team researcher Malcolm Stagg presented NatJack, a NAT attack class, with two assigned CVEs and interim mitigations.

Darktrace introduced the Behavioral Defense Platform to monitor AI, people, and infrastructure behavior and respond to deviations autonomously.

Reco expanded AI Runtime with browser-level enforcement, prompt analysis and blocking, and automated remediation, plus staged Browser Guard access.

Highway’s Q2 2026 Freight Fraud Index says communication-based attacks were 50% of classified fraud vectors.

Tenda firmware versions include an undocumented backdoor in /bin/httpd login() that grants admin web access via CVE-2026-11405.