SeverityCritical briefings
Only the stories rated critical: the flaws to patch first.
Max-Severity SonicWall SMA1000 Flaw Under Attack Just Days After Patch
A pre-authenticated SSRF vulnerability in SonicWall SMA1000 appliances is already being probed by attackers, three days after SonicWall shipped a fix.
Attackers Begin Probing AI-Discovered RCE Flaw in Rejetto HFS Servers
A critical weak signing key vulnerability in Rejetto HTTP File Server, uncovered with help from an AI model, is now seeing active…
Dell CSM Flaws Allow Unauthenticated Admin Access, Root on K8s Nodes
Dell has patched critical vulnerabilities in its Container Storage Modules, including a maximum-severity flaw that lets attackers bypass authentication entirely.
GitLab Fixes Critical 9.9 Flaw in Self-Hosted AI Gateway
A critical vulnerability in GitLab's self-hosted AI Gateway could let an authenticated user with Duo Agent Platform access execute commands on the…
Bitget Confirms Zero-Day in Third-Party Security Tools Fueled $387.5M Heist
Forensic investigations by SlowMist and Mandiant trace the crypto exchange breach to a zero-day in third-party security appliances, with attackers moving laterally…
Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass, Added to CISA KEV
A critical zero-day in Cisco Catalyst SD-WAN Manager lets unauthenticated attackers hijack the API with admin privileges, and Cisco says it is…
Citrix NetScaler Zero-Days Exploited to Deploy Web Shells, Gain Root Access
Attackers exploited two Citrix NetScaler zero-days, including a critical DTLS memory overflow bug, to plant custom web shells and tunneling malware weeks…
Kiteworks Patches Critical Flaw, Lifts Precautionary Shutdown Advisory
Kiteworks brought hosted customer systems back online after patching a critical vulnerability in a niche feature and finding no evidence of compromise…
Bitget Restarts Bitcoin Withdrawals After $387.5 Million North Korea-Linked Heist
The crypto exchange has resumed BTC withdrawals following a suspected North Korean breach that drained hot and warm wallets across seven blockchains,…
Two Unpatched Citrix NetScaler Zero-Days Under Active RCE Exploitation
Security firm watchTowr says attackers are actively exploiting two unpatched remote code execution flaws in Citrix NetScaler ADC and Gateway appliances, with…
ShinyHunters Bypasses WAFs to Revive Oracle PeopleSoft Attacks
Google's Mandiant says the extortion gang UNC6240 is using percent-encoded URL paths to slip past web application firewalls and reach the vulnerable…
CISA Confirms Active Exploitation of SharePoint and MikroTik RouterOS Flaws
A critical SharePoint code injection bug and a MikroTik RouterOS vulnerability have both been added to CISA's Known Exploited Vulnerabilities catalog after…