CVE-2026-18963 2

Vulnerability (CVE)

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

Red Hat and the Keycloak project patched CVE-2026-18963, a 9.1-rated flaw in the open-source identity and access management server that lets an unauthenticated remote attacker take over any account, including administrative accounts, by forcing a password...

Vulnerabilities & Patching

⚡ Weekly Recap: AI-Powered PLC Attacks, Git Lab Attacks, Stripe Key Leaks and More

Cyber Risks The Hacker News

U.S. government agencies warned that threat actors are using AI to write exploit scripts against internet-exposed Siemens S7 Series PLCs used in water, energy, and manufacturing, finding targets through legitimate scanning services such as Censys and...

Threat Actors & Nation-State