ManageEngine fixed an ADAudit Plus vulnerability, CVE-2026-6516, a CVSS 10 unauthenticated remote code execution flaw. Update to build 8606 now.
Zoho
Uncover the details of the PoisonSeed campaign targeting enterprises and cryptocurrency holders with phishing and email attacks.
By sending a specially crafted request, an attacker could exploit CVE-2024-0252 to execute arbitrary code on the system.