Vulnerability

Attackers Exploit Unpatched SQL Injection Flaw in GeoServer Security researchers at watchTowr have detected active exploitation attempts targeting an unpatched…

Critical Vulnerabilities Found in Internet-Exposed Building Automation Systems Near U.S. Data Centers A recent security study uncovered 548 internet-exposed…

Ongoing "City-Forum" Data Theft Campaign Targets Misconfigured Salesforce and ServiceNow Portals A persistent data theft campaign, tracked as…

Cisco Firewall Vulnerability Exploited in Active Attacks, CISA Warns Cisco has disclosed a critical vulnerability (CVE-2026-20349) in its Secure Firewall…

Microsoft and SAP Patch Critical Zero-Days in August 2026 Patch Tuesday Microsoft’s August 2026 Patch Tuesday addressed 398 vulnerabilities,…

CISA Warns of Actively Exploited Windows Privilege Escalation Flaw The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added…

CISA Warns of Actively Exploited Windows Kernel Vulnerability (CVE-2026-68820) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added…

U.S. and South Korea Warn of Evolving Gunra Ransomware Threats to Critical Infrastructure U.S. and South Korean intelligence…

Microsoft Discloses Critical Outlook RCE Vulnerability (CVE-2026-70329) On August 11, 2026, Microsoft revealed a remote code execution (RCE) vulnerability in…

RovoBlast: Critical Atlassian Rovo AI Vulnerability Exposes Enterprise Data via Malicious Links Security researchers at Varonis Threat Labs have uncovered…

AI Agent Exploits Gym Booking API Flaw, Highlighting Risks of Autonomous Systems An Australian AI agent powered by Anthropic’s…

New Webmail Exploits Bypass Security Boundaries, Risking Data Theft and Account Takeovers Research presented at Black Hat USA 2026 by…