SectionVulnerabilities
Patches, advisories and the CVEs behind them.
Cisco Patches Actively Exploited Secure Email Gateway Root Flaw
A critical path traversal bug in Cisco Secure Email Gateway's Advanced Malware Protection feature is being exploited in the wild to gain…
CISA Flags Actively Exploited Ivanti Connect Secure Zero-Day
A newly disclosed authentication bypass in Ivanti Connect Secure is under active exploitation, with attackers executing commands in memory to steal credentials…
Microsoft Patches Record 1,413 Flaws, CISA Flags Exploited Windows Zero-Day
Microsoft's latest Patch Tuesday fixes an unprecedented 1,413 vulnerabilities, including a Windows flaw already under active attack. CISA has added it and…
Critical Ghostscript Flaw Lets Malicious PDFs Hijack Servers
A heap buffer overflow in Ghostscript, tracked as CVE-2026-39919, can be triggered by a crafted PDF to achieve remote code execution on…
Max-Severity SonicWall SMA1000 Flaw Under Attack Just Days After Patch
A pre-authenticated SSRF vulnerability in SonicWall SMA1000 appliances is already being probed by attackers, three days after SonicWall shipped a fix.
FBI Nets Another ShinyHunters Suspect in Ongoing Breach Crackdown
FBI Director Kash Patel confirmed a fresh arrest tied to the ShinyHunters group behind the FBIjobs.gov breach, the third detention in the…
Attackers Breach .gh, .sl, .as Registries to Forge Certificates for Google Domains
Threat actors compromised third-party operators of three ccTLD registries and altered authoritative DNS records to obtain unauthorized HTTPS certificates for Google domains,…
ASOS Confirms Breach After Hackers Hijack App Notifications to Taunt Users
British retailer ASOS says attackers compromised a third-party customer communication platform and pushed rogue push notifications claiming a Snowflake instance was breached,…
Attackers Begin Probing AI-Discovered RCE Flaw in Rejetto HFS Servers
A critical weak signing key vulnerability in Rejetto HTTP File Server, uncovered with help from an AI model, is now seeing active…
Windows KB5124010 Update Crashes Games and Apps Using AC-3 Audio
Microsoft confirms its September 2026 Windows 11 preview update causes some games, media players, and productivity apps to crash when they rely…
DTU Breach Exposes Data on Up to 200,000 Students, Staff, and Alumni
Denmark's Technical University says attackers used stolen credentials to raid its identity management system, potentially exposing two decades of personal data including…
Dell CSM Flaws Allow Unauthenticated Admin Access, Root on K8s Nodes
Dell has patched critical vulnerabilities in its Container Storage Modules, including a maximum-severity flaw that lets attackers bypass authentication entirely.