SectionVulnerabilities
Patches, advisories and the CVEs behind them.
Microsoft Says Ignore False ‘Antivirus Turned Off’ Alerts After Defender Update
A bug in recent Microsoft Defender Antivirus updates is triggering false alerts that protection is disabled across Windows client and server systems.…
FulcrumSec Claims Manchester Airports Breach, Says 86 GB of Data Stolen
Extortion group FulcrumSec has claimed responsibility for the Manchester Airports Group breach, telling BleepingComputer it exfiltrated 86 GB of data including detailed…
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Researchers at Wordfence and Patchstack have disclosed five critical vulnerabilities across popular WordPress plugins and themes, including one authentication bypass flaw scoring…
Critical GiveWP Flaw Lets Unauthenticated Attackers Run Server Commands
A maximum-severity vulnerability in the popular GiveWP WordPress donation plugin lets attackers register accounts even when signups are disabled, then chain that…
Cosmos EVM Balance Flaw Exploited Across Six Chains After Cosmos Labs Knew Risk Existed
A critical balance-handling bug in the shared Cosmos EVM module was used to drain funds from six blockchains over five days in…
Android 17 Bakes In Encrypted Client Hello to Stop ISP Snooping
Google's Android 17 adds OS-level support for Encrypted Client Hello, hiding visited domain names from network providers by default, alongside stricter local…
Windows 11 KB5120998 Preview Update Brings 35 Fixes, New Admin Protection Feature
Microsoft's August 2026 optional cumulative update for Windows 11 24H2 and 25H2 adds taskbar and Start menu customization, begins rollout of a…
PaperCut Zero-Day Under Active Exploitation, Hits All NG and MF Versions
PaperCut has confirmed active zero-day attacks against all versions of its NG and MF print management software, releasing emergency patches while urging…
Trump Order Bans Foreign-Made Bulk-Power Equipment Over Backdoor Fears
A new executive order blocks acquisition of foreign-made technology used to run the U.S. power grid, citing rising cyber threats and supply-chain…
Boston Scientific Cyberattack Disrupts Order Processing and Shipments
The medical device maker disclosed a cybersecurity incident to the SEC that has knocked out access to key operating systems, halting its…
Critical Avada WordPress Theme Flaw Chains Six Bugs Into Zero-Click RCE
A critical vulnerability chain in the Avada theme and Fusion Builder plugin lets unauthenticated attackers achieve full server compromise, though exploitation requires…
Nutex Health Discloses Network Breach, Patient Data at Risk
The Houston-based hospital operator says attackers accessed and exfiltrated files from some of its servers, and warns the stolen data could be…