Security News

CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild

OverviewOn July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as improper authentication (CWE-287). CVE-2026-16232 has been assigned a critical CVSS score of 9.1. The vulnerability allows an unauthenticated remote attacker to obtain an application login token and authenticate to the management server with full administrative privileges, enabling modification of security

Related Companies

C

checkpoint

C

cakephp

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over TURN.

Preview: Cisco Talos at Black Hat USA 2026

Here’s some of the ways Talos is showing up at Black Hat, alongside our friends at Cisco and Splunk.

Related Companies

S

siderolabs

C

cisco

P

psf

P

python

P

pypi

OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face

"This is day one for cybersecurity in the age of agents," Hugging Face CEO says.

Related Companies

O

OpenAI

HF

Hugging Face

W

watchguard

K

kerberos-io

Real world incident response: Microsoft and AXA XL strengthen cyber resilience

Our collaboration with AXA XL brings Microsoft Incident Response services directly to cyber insurance policyholders, helping organizations coordinate technical, business, and insurance decisions. The post Real world incident response: Microsoft and AXA XL strengthen cyber resilience appeared first on Microsoft Security Blog.

Related Companies

M

microsoft

From Triage Grind to Strategic Operator: The New AI SOC Career Path

Learn how AI is reshaping SOC careers, elevating analysts from manual triage to strategic threat hunting and AI governance.

Podatność w oprogramowaniu GNU diffutils

W oprogramowaniu GNU diffutils wykryto podatność typu Integer Overflow (CVE-2026-53910).

Related Companies

G

gnu

What’s New in Rapid7 Products and Services: Q2 2026 in Review

If Q1 set the pace for Rapid7's tools, Q2 accelerated it. This quarter brought a steady stream of product enhancements, platform investments, and customer-driven innovation across Rapid7’s portfolio. Each release was designed with a clear goal in mind: helping security teams reduce complexity while increasing speed, context, and confidence in their day-to-day operations. Here’s a closer look at what launched in Q2.Detection and responseStreamline investigations with bidirectional and enriched Microsoft Defender alertsBidirectional synchronization and enriched alert context for Microsoft Defend

Related Companies

R

rapid7

If you pay a hacker’s ransom, chances are that they’ll come back for more

Related Companies

P

pay-rails

Podatność w oprogramowaniu Open Mercato

W oprogramowaniu Open Mercato wykryto podatność umożliwiającą ataki typu Denial of Service poprzez użycie złośliwych wyrażeń regularnych (CVE-2026-16270).