CVE-2026-54121, CVSS 8.8. A domain account with no privileges is sufficient to obtain an AD CS-signed certificate for the identity of a Domain Controller, then authenticate via PKINIT and extract krbtgt via DCSync. Patched on July 14, 2026, public exploit since today.
yesterday 3 1
A vulnerability in snap-confine allows a local user to gain root privileges on standard Ubuntu desktop installations where Snap is enabled by default.
Jul 23, 2026 9 3
A critical authentication bypass vulnerability in PAN-OS on the GlobalProtect portal (Palo Alto Networks' VPN firewall) is now being exploited in the real world by the Qilin ransomware gang. Arctic Wolf, relayed by BleepingComputer, confirms active intrusions: the patch can no longer wait.
Jul 21, 2026 24 3
The Danish studio spoke to Rock Paper Shotgun about an early version of its Bond game, which would have featured several 00 agents. A making-of of a creative pivot.
Jul 19, 2026 24 3
The CISA adds three SharePoint vulnerabilities to its KEV catalog - confirmed exploitation in the wild. Two other critical flaws remain on the table. What to patch, and quickly.
Jul 17, 2026 18 3
