Security & Fraud archive
Browse Security & Fraud reporting by news or event date.
Browse stories by topic and news date. The date describes the reported development; a Svertok publication date appears on the story when applicable.
Showing 1-9 of 9
Svertok story · News date:
CVE-2026-88779 has entered the Known Exploited Vulnerabilities catalog, raising its remediation priority while leaving the attackers and campaign scale unidentified.
Source: Cybersecurity and Infrastructure Security Agency
Read the story
Svertok story · News date:
A crafted flow configuration could let an authenticated Duo Agent Platform user escape a prompt-template sandbox and execute commands on the gateway. GitLab rates the issue CVSS 9.9.
Source: GitLab
Read the story
Svertok story · News date:
CVE-2026-104286 is now in the federal exploited-vulnerability catalog, raising its remediation priority while the short alert does not provide affected versions or attack details.
Source: www.cisa.gov
Read the story
Svertok story · News date:
CISA says CVE-2026-76504 is actively exploited. BOD 26-04 binds Federal Civilian Executive Branch agencies, while CISA encourages all organizations to prioritize cataloged vulnerabilities.
Source: www.cisa.gov
Read the story
Svertok story · News date:
The November program will examine the identities, data and cloud resources that AI agents can access while previewing Microsoft's security roadmap.
Source: Microsoft Security
Read the story
Svertok story · News date:
CVE-2026-86950 now appears in CISA’s Known Exploited Vulnerabilities Catalog, although the alert does not identify specific Apple models, victims or attack volume.
Source: www.cisa.gov
Read the story
Svertok story · News date:
CVE-2026-87902 is now in the federal Known Exploited Vulnerabilities Catalog, raising its remediation priority for exposed systems.
Source: www.cisa.gov
Read the story
Svertok story · News date:
On August 6, N-able said Hotfix 2 superseded its first fix, while CISA’s catalog recorded exploitation of the authentication flaw.
Source: N-able security guidance and CISA
Read the story
Svertok story · News date:
A joint advisory says a Russian state-backed group is exploiting vulnerable Zimbra servers to take email and other sensitive data without requiring a click.
Source: Joint Zimbra phishing campaign advisory
Read the story