A dangerous pair of critical authorization failures within the Portainer container management platform allows standard, restricted users...
Cyber Security
A severe vulnerability discovered in Marten, a highly popular .NET transactional document store and event store library,...
Security researchers have exposed a highly stealthy attempted intrusion that weaponized an open-source framework into a potent...
A sprawling cybercriminal operation has been intercepted, but not before thousands of machines were quietly infected by...
A massive internal data leak has blown the lid off “The Gentlemen,” a highly organized Ransomware-as-a-Service (RaaS)...
A critical severity vulnerability, tracked as CVE-2026-35194, has been disclosed in Apache Flink, exposing the distributed processing...
A pair of severe vulnerabilities discovered in Strapi, the widely used open-source headless Content Management System (CMS),...
Welcome to your weekly vulnerability digest. If your security dashboards have been flashing red, your telemetry is...
Security researchers have unveiled a novel defensive bypass that allows any low-privileged domain user to lock down...
Cybersecurity researchers have just dropped a report on a critical “management plane” threat that has spent the...
A new wave of cyber espionage has been unleashed against Russian industrial, financial, and transport sectors, revealing...
A critical “sanity check” gap in the Linux kernel’s ptrace logic has finally been addressed, but not...
Recently, cPanel & WHM and WP Squared have issued patches for five critical vulnerabilities. These flaws range...
In a major security disclosure, JPCERT/CC has issued an urgent advisory regarding multiple high-severity vulnerabilities discovered in...
Security teams are being urged to move quickly following the disclosure of a critical Remote Code Execution...
In a major security overhaul, pgAdmin, the world’s most popular open-source administration platform for PostgreSQL, has released...
Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
Microsoft has issued an urgent warning for organizations running on-premises email infrastructure. A newly disclosed vulnerability in...
Google has unleashed a major security update for the Chrome Stable channel, addressing a staggering 79 security...
The web infrastructure world received a major wake-up call today as nginx-1.30.1 was released to address a...
Palo Alto Networks has released a series of important security updates addressing multiple vulnerabilities across its PAN-OS...
The threat intelligence team at CYFIRMA has uncovered a sophisticated multi-stage intrusion campaign. Attackers are currently leveraging...
In a major discovery for the WordPress ecosystem, PRISM, Wordfence Threat Intelligence’s autonomous vulnerability research platform, has...