Advertisement
Cisco SD-WAN RCE via CVE-2026-20182 — Mitigation Guide
Cisco patches CVE-2026-20182, the sixth SD-WAN zero-day exploited in 2026. Learn how threat actor UAT-8616 leverages this flaw for targeted attacks.
CVE-2026-42897: How Attackers Exploit Microsoft Exchange Server
Microsoft warns of active exploitation of CVE-2026-42897, a critical spoofing and XSS vulnerability in on-premise Exchange Server triggered via email.
Cisco Catalyst SD-WAN Controller Authentication Bypass via CVE-2026-20182 Exploited in Zero-Day Attacks
Cisco warns of a critical authentication bypass in Catalyst SD-WAN Controller (CVE-2026-20182) actively exploited in zero-day attacks, granting admin access.
Windows BitLocker Zero-Day Bypass and Privilege Escalation PoC Released
Security researcher releases PoC for YellowKey and GreenPlasma, unpatched vulnerabilities allowing BitLocker bypass and SYSTEM privilege escalation on Windows.
Google’s Big Sleep AI Agent Discovers Real-World SQLite Zero-Day
Google Project Zero and DeepMind’s Big Sleep agent identifies an exploitable stack-based buffer underflow in SQLite, marking a shift in AI vulnerability discovery.
CVE-2026-43284: 'Dirty Frag' Linux Vulnerability Exploited — Patch Now
Analysis of the 'Dirty Frag' (Copy Fail 2) Linux kernel vulnerabilities CVE-2026-43284 and CVE-2026-43500, which enable potential remote code execution.
Ivanti EPMM CVE-2023-35078 Zero-Day: Urgent CISA Patch Directive
CISA orders federal agencies to patch Ivanti EPMM CVE-2023-35078 within four days following active zero-day exploitation against government networks.
CVE-2023-35081: Ivanti EPMM Remote Code Execution Zero-Day Analysis
Ivanti warns of a high-severity RCE vulnerability in EPMM exploited in zero-day attacks. Secure your systems by patching CVE-2023-35081 today.
CVE-2026-0300: Critical Zero-Day in PAN-OS Captive Portal Service
Palo Alto Networks warns of CVE-2026-0300, a critical zero-day vulnerability in the PAN-OS Captive Portal service currently being exploited in the wild.
CVE-2024-23296: Apple Patches Actively Exploited Notification Flaw
Apple releases urgent security updates for iOS and iPadOS to address CVE-2024-23296, a memory corruption vulnerability in Notification Services seeing active use.
CVE-2024-38107: Microsoft Defender BlueHammer Flaw Exploited - Patch Now
CISA orders federal agencies to patch the BlueHammer zero-day, a critical Microsoft Defender privilege escalation flaw currently under active exploitation.
Anthropic Project Glasswing: The Shift to AI-Driven Zero-Day Discovery
Anthropic delays Project Glasswing after its AI model identifies critical zero-day vulnerabilities across major tech stacks, sparking a massive patching effort.