Coverage
Vulnerabilities
1245 articles on vulnerability disclosures and exploits
Advertisement
CVE-2024-21762 and Ivanti Flaws: Edge Gateway Scanning Escalates
Technical analysis of ongoing scanning activity targeting Ivanti and Fortinet SSL-VPN gateways. Learn to detect exploits and apply critical mitigations.
ICS Patch Tuesday: 8 Industrial Giants Patch Critical Vulnerabilities
Analysis of new security advisories from Siemens, Schneider Electric, and others regarding critical infrastructure vulnerabilities and remediation steps.
OpenAI GPT-5.4-Cyber: Defensive AI for Security Teams
OpenAI unveils GPT-5.4-Cyber, a model optimized for defensive security. Learn how it assists SOC teams in threat detection and vulnerability remediation.
Combatting EDR-Killer Tools and BYOVD Attack Techniques
Defenders face new challenges as the EDR-killer ecosystem expands, utilizing Bring Your Own Vulnerable Driver (BYOVD) to disable security agents.
Microsoft Patch Update: Zero-Day Privilege Elevation Dominates
Microsoft's latest patch update addresses 165 vulnerabilities, with over half being privilege elevation flaws, including two actively exploited zero-days.
April 2026 Patch Tuesday: SharePoint Zero-Day, BlueHammer, & Adobe RCE
Microsoft's April 2026 Patch Tuesday addresses 167 vulnerabilities, including a SharePoint Server zero-day, Windows Defender 'BlueHammer' flaw, and an actively exploited…
Microsoft Patch Tuesday April 2026: Record Update Cycle Analysis
Analysis of Microsoft's April 2026 Patch Tuesday, highlighted as a record release, providing context and recommendations for security professionals.
CISA KEV Catalog Update: Microsoft Office RCE and SharePoint Exploited
CISA adds CVE-2009-0238 (Microsoft Office RCE) and CVE-2026-32201 (SharePoint Server input validation) to its Known Exploited Vulnerabilities Catalog.
Adobe Patches Critical ColdFusion and InDesign RCE Vulnerabilities
Adobe's September 2024 update addresses 55 vulnerabilities, including critical RCE in ColdFusion and InDesign. Patching is required to prevent system takeover.
CVE-2024-30044: SharePoint Server RCE Zero-Day Patched — Patch Now
Microsoft's May 2024 Patch Tuesday addresses 61 vulnerabilities including a critical SharePoint RCE zero-day and a Windows DWM elevation of privilege flaw.
Windows 10 KB5082200 ESU: Patching April 2026 Zero-Day Flaws
Microsoft addresses two critical zero-days in the Windows 10 KB5082200 Extended Security Update. Learn how to secure EOL systems against active exploitation.
PHP Composer RCE via CVE-2026-40176 — Mitigation Guide
High-severity command injection flaws in PHP Composer's Perforce driver enable arbitrary command execution. Update to versions 2.2.27 or 2.7.2 immediately.
CSA Urges 'Mythos-Ready' Security to Combat AI-Accelerated Threats
The Cloud Security Alliance warns CISOs of shrinking exploit windows as AI models like Mythos automate vulnerability discovery and threat execution.
CVE-2024-22257: Critical SAP AS ABAP Code Injection — Patch Now
SAP releases patches for 19 vulnerabilities, including a CVSS 9.8 code injection flaw in SAP AS ABAP and high-severity RCE in SAP Business Client.
Analyzing 216M Security Findings: Critical Risks Surge by 400%
OX Security research reveals a 400% spike in critical risks driven by AI-assisted development, outpacing a 52% increase in total security alert volume.
CISA KEV Update: Fortinet FortiClient EMS CVE-2026-21643 Under Attack
CISA adds six flaws to the KEV catalog, including a critical unauthenticated SQL injection in Fortinet FortiClient EMS (CVE-2026-21643). Patch immediately.
CVE-2025-0520: ShowDoc RCE via File Upload Flaw Under Active Attack
Critical CVE-2025-0520 in ShowDoc allows RCE via unrestricted file upload. Attackers are actively targeting unpatched servers to deploy web shells.
Cisco FMC Zero-Day Exploited by Interlock Ransomware: March 2026 CVEs
Runtime Rebel analyzes March 2026's significant rise in high-impact CVEs, including a Cisco FMC zero-day actively exploited by Interlock Ransomware.
CISA KEV Update: Exchange Server, Adobe, MS Windows Exploits
CISA adds seven vulnerabilities, including critical Microsoft Exchange Server deserialization, to its Known Exploited Vulnerabilities Catalog, urging immediate…
Adobe Acrobat & Reader Zero-Day Exploitation: Immediate Patch Required
Adobe has patched an actively exploited Zero-Day in Acrobat and Reader. Attackers used crafted PDF files for at least four months. Update immediately.
AI Vulnerability Storm: Preparing for Post-Mythos Exploits
CISOs must prepare for an 'AI vulnerability storm' triggered by Anthropic's Claude Mythos. Proactive security frameworks are essential to mitigate new risks.
Anthropic's Mythos Preview AI: Proactive Vulnerability Hunting with Project Glasswing
Anthropic's Claude Mythos Preview AI possesses significant cyberattack capabilities.
CVE-2024-38472: wolfSSL ECDSA Signature Verification Bypass Patch Guide
Critical vulnerability CVE-2024-38472 in wolfSSL allows certificate forgery and MitM attacks via improper ECDSA hash validation. Patch to 5.7.4 immediately.
CVE-2026-34621: Adobe Acrobat and Reader Zero-Day Emergency Patch
Adobe issues an emergency fix for CVE-2026-34621, a critical Acrobat and Reader zero-day exploited in the wild. Learn technical details and mitigation steps.