CVE‑2026‑78287: Staggs plugin RCE advisory released, no exploitation yet
A critical remote code execution vulnerability in the Staggs WordPress plugin has been officially advised, but no active exploitation has been observed.
· 1 minRead →
Ncerio Intelligence
Security news with a defensive point of view.
Verified public-source developments and concise actions for teams responsible for real infrastructure.
Latest intelligence
66 published briefings matched.
Browse the briefing archive
Source-linked reporting, clearly labeled by evidence status.
Zoom fixes critical Windows flaw CVE-2026-108186
Zoom Workplace for Windows users should update to version 7.1.8 or later after a critical privilege-escalation fix.
· 1 minRead →
CISA Adds Four New Vulnerabilities to KEV Catalog
CISA announced four new vulnerabilities added to its Known Exploited Vulnerabilities catalog on November 9, 2026, highlighting active exploitation of GPUStack, SignalWire, OpenBSD OpenSSH, and IBM Aspera products.
· 1 minRead →
Google expands access to Gemini 4 Carbon following AI agent verification
Google has opened Carbon access to paying developers and businesses after DeepMind used AI agents to verify libsignal security guarantees.
· 1 minRead →
El Camino Health reported as victim of vortex ransomware
Ransomware group claims theft of clinical records and physician credentials from the healthcare provider.
· 1 minRead →
Llano Independent School District Hit by Qilin Ransomware
Qilin ransomware group claims responsibility for an attack on the Texas school district, sector classified as education.
· 2 minRead →
Google Suspends Open-Source Bug Bounty Over AI Reports
Infosecurity Mag reports Google paused its Open Source Vulnerability Rewards Program due to a surge in automated submissions.
· 2 minRead →
Exchange Server out-of-band update fixes CVE-2026-96940
Microsoft releases urgent patch for high-severity mailbox access bug discovered internally.
· 2 minRead →
Apple Tightens macOS Full Disk Access Controls for AI Agents
The company announces measures to restrict how artificial intelligence agents access system data.
· 2 minRead →
CISA Adds Citrix NetScaler Vulnerability to Exploited List
The agency flags CVE-2026-88779 as actively exploited in ongoing attacks against Citrix appliances.
· 2 minRead →
UK Schools Recover Faster from Cyber Incidents
Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks
· 2 minRead →
Denmark Confirms 8.8 Million Citizen Records Exposed in Security Incident
The Central Person Register breach affects names, addresses, and CPR numbers of nearly the entire population.
· 2 minRead →
Turn news into an exposure decision.
Ncerio correlates vulnerability intelligence with the systems you actually operate.