Advertisement
Meta Broken Access Control: Customer Support Data Exposure
A broken access control vulnerability in Meta's support infrastructure allowed exposure of sensitive customer support data. Learn about the impact and mitigations.
WSUS Sync Delays & Timeouts: Microsoft's Manual Fix Guidance
Microsoft provides manual steps to resolve persistent sync delays and timeouts impacting Windows Server Update Services (WSUS) deployments, affecting Windows Update…
PAN-OS GlobalProtect Authentication Bypass Exploited by Qilin
The Qilin ransomware gang is actively exploiting a critical Palo Alto Networks PAN-OS GlobalProtect authentication bypass vulnerability to breach corporate networks.
WP2Shell: WordPress RCE via Chained CVE-2026-60137 & CVE-2026-63030
WP2Shell exploits CVE-2026-60137 and CVE-2026-63030 to achieve remote takeover on millions of WordPress sites. Immediate patching is critical.
SonicWall SMA1000 Zero-Days Exploited: Custom Malware & Mitigation
Threat actors exploited zero-day flaws in SonicWall SMA1000 VPN appliances for weeks to deploy custom malware. Patch now to secure your network.
CVE-2026-63030: WordPress Core SQLi Leads to Unauth RCE
Critical SQL injection vulnerability (CVE-2026-63030) in WordPress Core enables unauthenticated remote code execution. Active exploitation confirmed.
Advertisement
SonicWall Zero-Days CVE-2026-15409 & CVE-2026-15410 Under Active Exploit
Volexity's UTA0533 exploited SonicWall zero-days (CVE-2026-15409, CVE-2026-15410) for weeks, deploying custom malware. Urgent patching required.
OpenSSL HollowByte Vulnerability: Mitigating Memory Exhaustion Risks
OpenSSL addresses the HollowByte Denial-of-Service vulnerability. Learn how buffer pre-allocation flaws impact server availability and memory management.
Capital One VulnHunter: Open-Source AI Tool for Exploit Path Analysis
Capital One open-sources VulnHunter, an AI-powered agentic tool designed to trace complex exploit paths and validate software vulnerabilities autonomously.
KB5121767: Microsoft Fixes Windows 11 Dell PC Shutdown Bug
Microsoft issues emergency out-of-band update KB5121767 to resolve critical system shutdown issues affecting Dell PCs running the July 2026 Windows 11 update.
7-Zip RCE via CVE-2026-14266: XZ Archive Extraction Patch Guidance
7-Zip versions prior to 26.02 are vulnerable to a heap-based buffer overflow. Learn how to mitigate CVE-2026-14266 and secure XZ archive extractions.
WP2Shell Vulnerabilities CVE-2026-60137 & CVE-2026-63030 Exploited
WordPress sites face active exploitation via WP2Shell vulnerabilities CVE-2026-60137 and CVE-2026-63030. Learn the technical details and mitigation steps.
CVE-2026-42533: NGINX RCE and Denial of Service — Mitigation Guide
Exploit analysis of CVE-2026-42533, a critical heap buffer overflow in NGINX. Learn how to detect and patch worker process crashes and potential RCE.
WordPress wp2shell RCE: Public Exploits Released for Core Flaws
Public exploits for wp2shell RCE flaws in WordPress Core are now available. Learn how to detect, mitigate, and patch these critical vulnerabilities immediately.
7-Zip 24.05 RCE via Malicious Archives: Patch Guidance
7-Zip version 24.05 addresses a critical remote code execution vulnerability found in archive handling. Learn how to detect and mitigate this risk in your SOC.
WordPress Core RCE wp2shell: Versions 6.9 and 7.0 Vulnerable
Unauthenticated attackers can achieve RCE on WordPress 6.9 and 7.0 core installations via the wp2shell flaw. Learn how to secure your site today.
Inc Ransomware Exploits SonicWall SMA Zero-Days for Root Access
Inc Ransomware is actively exploiting chained zero-day vulnerabilities in SonicWall SMA appliances, achieving root-level capabilities.
HollowByte DDoS: OpenSSL Memory Exhaustion via 11-byte Payload
HollowByte enables unauthenticated DoS on OpenSSL servers, depleting memory with an 11-byte payload. Understand the impact and mitigation.
OpenSSL HollowByte Flaw: Memory Exhaustion via 11-Byte TLS Requests
The HollowByte vulnerability allows attackers to freeze OpenSSL server memory using 11-byte requests. Learn how to mitigate this denial-of-service risk.
Gold Eagle Clearinghouse: Centralizing AI Vulnerability Management
The White House Gold Eagle clearinghouse aims to coordinate AI vulnerability responses, yet technical implementation details remain unclear for security teams.
Windows LegacyHive Zero-Day Exploit Grants Admin Access — Patch Status
The LegacyHive Zero-Day exploit allows local attackers to gain SYSTEM privileges on patched Windows systems by targeting legacy registry hive permissions.
CVE-2026-58644: SharePoint RCE Zero-Day Exploited in the Wild
CISA adds CVE-2026-58644, a critical Microsoft SharePoint Server deserialization RCE vulnerability with a CVSS 9.8, to its Known Exploited Vulnerabilities catalog.
Anthropic Claude Chrome Extension: Malicious AI Action Trigger
A flaw in Anthropic's Claude for Chrome extension enables malicious extensions to trigger AI actions, potentially abusing access to connected services like Gmail, Google…
n8n Token Exchange Flaw: Impersonation via `sub` Claim Bypass
A critical token exchange vulnerability in n8n Enterprise allows attackers to impersonate users by leveraging `sub` claim matching across multiple external issuers…