#Enterprise Security
All CosmicBytez Labs articles tagged #Enterprise Security, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-12342: SailPoint IdentityIQ Unauthenticated Remote Code Execution
A critical, unauthenticated RCE in SailPoint IdentityIQ's web service API lets attackers execute code with no credentials.
- News
Kiteworks Urges Customers to Shut Down Servers Over Possible Imminent Zero-Day Attack
Kiteworks told 1,500+ customers to shut down servers for a multi-hour window after credible threat intel warned of a possible imminent zero-day attack.
- Security
CVE-2026-66269: Dell OpenManage Server Administrator Unsafe Reflection Flaw
Dell patches an unauthenticated unsafe-reflection flaw in OpenManage Server Administrator that lets remote attackers bypass protection mechanisms.
- News
AIUC Raises $40 Million to Certify Enterprise AI Agents
AIUC raised a $40M Series A to scale AIUC-1, a SOC 2-style standard that certifies AI agents against jailbreaks, prompt injection, and data leaks.
- News
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
CISA adds a maximum-severity Oracle WebLogic and HTTP Server flaw to the KEV catalog as active exploitation is confirmed in the wild.
- News
Enterprise Perimeter Defenses Improved — Interior Security Collapsed
Picus Blue Report 2026: edge prevention rose to 69% but interior dropped to 37%. Registry credential theft blocked less than 1% of the time.
- News
Microsoft Teams Vishing Attacks Lead to Chaos Ransomware Deployment
Threat actors are impersonating IT support staff in Microsoft Teams voice calls to gain remote access to corporate devices and deploy Chaos ransomware...
- Security
CVE-2026-57106: Critical SSRF in SAP Data Quality Enables Unauthenticated Privilege Escalation
A CVSS 10.0 server-side request forgery vulnerability in SAP Data Quality Management allows an unauthenticated attacker to escalate privileges over the...
- News
How Enterprise GenAI Can Amplify Ransomware Risk — and How to Contain It
Enterprise AI assistants and agents that inherit excessive permissions or compromised identities create new ransomware attack paths. Identity controls,...
- News
Estee Lauder Discloses Data Breach via Oracle E-Business Suite Flaw
Cosmetics giant Estee Lauder is notifying customers and employees of a data breach after threat actors exploited a vulnerability in Oracle E-Business...
- News
SonicWall SMA1000 Flaws Exploited as Zero-Days to Push Custom Malware
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks before patches were available, allowing threat...
- News
Microsoft Warns of Surge in ACR Stealer Attacks on Enterprise Customers
Microsoft's threat intelligence team has flagged a significant spike in ACR Stealer campaigns targeting enterprise environments — harvesting...
- News
Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
A critical CVSS 9.8 authentication bypass vulnerability in Oracle E-Business Suite's Payments module is being actively exploited in the wild, according to...
- News
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
A heap over-read vulnerability introduced in a 1997 FTP parser change allows a malicious co-user of a shared Squid proxy to read other users' cleartext...
- Security
CVE-2026-47367: UID Enterprise Agent Command Injection via Improper Input Validation
A critical CVSS 9.9 command injection vulnerability in UID Enterprise Agent allows a low-privileged network attacker to execute arbitrary commands on the...
- News
Only 10% of SOCs Say They're Getting Excellent Value From AI — What the Second Wave Must Deliver
A new survey reveals only 10% of Security Operations Centers report getting excellent value from AI investments. As billions flow into AI-powered security…
- Security
CVE-2026-49185: FieldX MDM ADB Topic Command Injection via Runtime.exec()
A critical CVSS 9.8 command injection vulnerability in the FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), enabling…
- News
Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches
A stack-based buffer overflow flaw in HP OfficeConnect VoIP phones can be exploited remotely to achieve code execution, potentially allowing attackers to…
- News
Geordie Raises $30 Million for AI Security and Governance Platform
AI security startup Geordie closes a $30M round led by Balderton Capital to help enterprises detect and govern AI risk across their environments.
- News
Can You Enforce Strong Active Directory Password Rules Without Frustrating Users?
Strong AD passwords don't have to mean frustrated users — passphrases, breached-password checks, and self-service resets balance security and usability.
- News
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE
Critical security vulnerabilities in SEPPMail Secure E-Mail Gateway — an enterprise email security appliance — could allow attackers to achieve remote...
- News
SAP Fixes Critical Vulnerabilities in Commerce Cloud and S/4HANA
SAP's May 2026 Security Patch Day addresses 15 vulnerabilities across multiple enterprise products, including two critical-severity flaws in Commerce...
- News
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw
Cybersecurity researchers have disclosed a critical remote code execution vulnerability in GitHub.com and GitHub Enterprise Server that allows an...
- News
Microsoft Now Lets Admins Uninstall Copilot on Enterprise
Following the April 2026 Patch Tuesday, Microsoft has made broadly available a new MDM policy setting that enables IT administrators to fully uninstall...
- News
Fortinet FortiClient EMS Zero-Day CVE-2026-35616 Actively
A critical zero-day in FortiClient EMS with a CVSS score of 9.8 is being actively exploited in the wild while Fortinet has released only an emergency...
- News
New Progress ShareFile Flaws Can Be Chained in Pre-Auth RCE
Two newly disclosed vulnerabilities in Progress ShareFile can be chained together to enable unauthenticated remote code execution and file exfiltration,...
- News
Google: 90 Zero-Days Exploited in 2025 — Enterprise Tech
Google's Threat Intelligence Group tracked 90 zero-day vulnerabilities actively exploited in 2025, with enterprise software and appliances accounting for...
- News
Microsoft Announces Major Security Features for Copilot
New AI-powered threat detection and automated incident response capabilities coming to Microsoft 365 E5 subscribers this quarter.