Coverage
Vulnerabilities
1309 articles on vulnerability disclosures and exploits
Advertisement
CVE-2026-104935: Ivanti Connect Secure RCE via Auth Bypass
CISA confirms active exploitation of CVE-2026-104935 in Ivanti Connect Secure, an auth bypass leading to remote code execution.
SonicWall SMA 1000 SSRF Under Active Attack
Attackers are exploiting a critical Server-Side Request Forgery (SSRF) vulnerability in SonicWall SMA 1000 appliances, demanding immediate patching.
Anthropic Warns Small AI Models Could Self-Replicate on IoT
Anthropic warns small AI models may soon self-replicate on commercial IoT devices without a data center, bypassing traditional botnet limits.
CVE-2026-105445: Docker Hub Flaw Enables User Impersonation, Supply Chain Risk
Critical flaw CVE-2026-105445 in Docker Hub allowed attackers to impersonate users via PAT reassignment, posing a software supply chain risk.
AgentCorruption: AWS Bedrock AgentCore Fleet Takeover Via Single Prompt
Analysis of 'AgentCorruption,' a patched vulnerability in AWS Bedrock AgentCore allowing compromise of an entire fleet via a single AI chatbot.
ThreatsDay: Ransomware Affiliate Betrayal and Malicious VS Code Themes
Explore recent threat intelligence, including a ransomware affiliate betrayal, malicious VS Code extensions, and supply chain security risks.
CVE-2015-3306: ProFTPD Improper Access Control Exploitation
Critical improper access control vulnerability in ProFTPD (CVE-2015-3306) allows remote file manipulation, actively exploited.
CVE-2021-3199: ONLYOFFICE Docs RCE via Path Traversal
Actively exploited path traversal vulnerability [CVE-2021-3199] in ONLYOFFICE Docs Server enables remote code execution when JWT is used. Immediate patching is critical.
CVE-2023-22894: Strapi Cleartext Storage Exploited
CISA confirms active exploitation of CVE-2023-22894, a Strapi cleartext storage vulnerability exposing sensitive user data, potentially chained for RCE.
CVE-2016-3081: Apache Struts RCE via Command Injection — Patch Now
CISA confirms active exploitation of CVE-2016-3081, an Apache Struts command injection flaw leading to remote code execution.
CVE-2015-5477: Remote DoS in ISC BIND via TKEY Queries
CISA confirms active exploitation of CVE-2015-5477, a remote Denial of Service vulnerability in ISC BIND affecting critical DNS infrastructure.
Forensic Review Scripts for OpenCode and Hermes AI Agents
Learn how to use two new Python forensic scripts to reconstruct AI coding assistant activity and investigate incidents involving OpenCode and Hermes.
Cisco Patches 35 Vulnerabilities: Critical Flaws in Meraki, NX-OS
Cisco released patches for 35 vulnerabilities, including multiple critical issues in Meraki, License On-Prem, NX-OS, and APIC products.
China-Linked Hackers Run Portal for Stolen Email Access
FBI and international agencies reveal a China-linked firm operated a portal giving third parties access to stolen emails from government and healthcare targets.
Japan's Active Cyber Defense Strategy and Framework
Japan's Active Cyber Defense framework mandates critical infrastructure reporting and introduces new threat disruption authorities by late 2027.
Atlassian Arbitrary File Access Exploitation Scans Observed
Atlassian products are targeted by scans exploiting CVE-2026-21589 for arbitrary file access, potentially exposing sensitive configuration.
Multi-Vendor Patches: Adobe, Apple, Foxit, Microsoft Vulnerabilities
Cisco Talos discloses patched privilege escalation, RCE, and information disclosure vulnerabilities across Adobe, Apple, Foxit, and Microsoft products.
WordPress Plugin XSS: Ninja Forms & WPC Product Bundles Exploited
Hackers are exploiting XSS vulnerabilities in Ninja Forms and WPC Product Bundles for WooCommerce to install backdoors and create rogue admin accounts on WordPress sites.
Emergency Patching: How Vendors Can Fix Vulnerabilities Faster
Examine technical methods for emergency software patching, exploring how large vendors bypass traditional delivery bottlenecks during crises.
Google PageBreak AI Agent Uncovers 500 Web App Flaws
Google's PageBreak AI agent identified over 500 flaws in its own web applications, showcasing the growing trend of AI-driven vulnerability discovery.
Pwn2Own Ireland Uncovers 32 Zero-Days Across Diverse Systems
Security researchers exploited 32 zero-day vulnerabilities in mobile phones, smart home devices, and AI systems on day one of Pwn2Own Ireland 2026.
Blinder Tunnel Campaign Targets Iraqi Critical Infrastructure
Iranian state-aligned threat actor CL-STA-1178 targets Iraqi critical infrastructure using ShelbyLoader V2 and GitHub API for command-and-control.
Apple iOS Inactivity Reboot Bypass by Magnet Forensics
A cyber-weapons manufacturer exploits a possible iOS vulnerability, allowing law enforcement to bypass automatic reboot and preserve data indefinitely.
Securing RMM Software: 8 Controls MSPs Must Test
Learn 8 essential security controls MSPs must test when evaluating remote monitoring and management software to prevent downstream supply chain attacks.