Enterprise Technology Records

Dirty Frag affects Linux kernel 4.10+ by chaining xfrm-ESP and RxRPC page-cache flaws, enabling privilege escalation.

Acronis paired with Rimouski Océanic through MicroAge Rimouski to deliver email security, Microsoft 365 backup, and XDR via one platform.

SGLang has two unauthenticated RCE issues and one unauthenticated path traversal tied to specific configs and endpoints.

Netskope adds AI risk attributes to Cloud Confidence Index and describes prompt/response guardrails for SaaS apps with AI agents.

JupiterOne launched AI Attack Surface Management (AI ASM) and Unified Vulnerability Management (UVM) to provide relationship-aware asset and vulnerability context.

Arctic Wolf launched Aurora Mobile Threat Defense for iOS and Android, adding real-time mobile phishing and unsafe network detection plus Threat Intelligence Plus and Concierge enhancements.

Vendor blog highlights a governance gap for AI used via MCP, APIs, and CLI, citing a report that 92% of orgs lack MCP policies.

A local privilege escalation flaw in Linux kernel versions 4.17+ can let an unprivileged user gain root access.

Infoblox completed its acquisition of Axur and will add DRPS URL scanning with AI, feeding DNS blocking and takedowns into Infoblox Threat Defense.

Synack made Sara AI Pentesting generally available, pairing agentic AI with human validation for continuous security testing.

Tencent’s Weixin 2025 Brand Protection Report cites AI detection, user reports, and brand partnership outcomes, including $430M+ recovered enforcement value.

Intercom [email protected] used a preinstall flow to download Bun, harvest GitHub credentials, and use them for npm spread.

Huawei launched Xinghe AI Network Security Agentic SOC with Sensing, Analysis and Enforcement agents for automated detection and response.

Fortinet will return to the World Economic Forum Annual Meeting on Cybersecurity 2026 in Geneva, citing participation in public-private cyber initiatives.

NSS Labs publishes two AI security white papers and a new AIPS test methodology focused on runtime guardrails like prompt injection and unauthorized output prevention.

Fortinet’s 2026 Global Cybersecurity Skills Gap Report links talent shortages, board AI risk gaps, and breach costs to ongoing cybersecurity breaches.

Unauthenticated access to DRC INSIGHT COS /v0/configuration lets same-network users modify config, enabling data exfiltration or disruption (CVE-2026-5756).

Censys added integrations with AI, SIEM, and SOAR platforms, including Cisco Splunk SOAR and ES, Microsoft Sentinel, and Google SecOps.

Ollama’s model quantization engine has an unauthenticated remote information disclosure flaw in CVE-2026-5757 that can let an attacker with model upload access read and exfiltrate server heap memory.

Overview A remote code execution vulnerability has been discovered in the SGLang project, specifically in the reranking endpoint (/v1/rerank).