Ivanti disclosed eight remote-code-execution flaws in Neurons for ITSM, two requiring no login. Cloud tenants were patched in August, but on-premises administrators must apply the right September patch.
GiveWP CVE-2026-82222 chains plugin-specific account creation, stored PHP objects and a shipped gadget chain into unauthenticated server command execution. Version 4.16.7.2 fixes it.
A public proof of concept for CVE-2026-19490 is now drawing exploit-matching traffic. The evidence shows active targeting, not confirmed compromise.
As artificial intelligence moves from answering questions to taking actions, organisations need to rethink where capability ends and authority begins. For the last few years, most people have interacted with artificial intelligence in a fairly contained way. You ask a…
