Vulnerability

Microsoft Patches Actively Exploited Zero-Day in Windows Desktop Window Manager Microsoft has released emergency security updates to address CVE-2026-21519, a…

Large-Scale Citrix ADC Gateway Reconnaissance Campaign Uncovered A sophisticated reconnaissance campaign targeting Citrix ADC (NetScaler) Gateway infrastructure has been detected,…

Medium-Severity Vulnerability in Iconics Suite SCADA Systems Exposes Critical Infrastructure to DoS Attacks A medium-severity vulnerability (CVE-2025-0921) in Mitsubishi Electric’…

High-Severity Command Execution Flaw Disclosed in Hikvision Wireless Access Points A critical authenticated command execution vulnerability, tracked as CVE-2026-0709, has…

Ivanti Discloses Two Critical EPMM Vulnerabilities with Active Exploitation Ivanti has revealed two critical vulnerabilities in its Endpoint Manager Mobile…

Russian APT28 Exploits Microsoft Office Zero-Day Within Days of Patch Release Russia-linked advanced persistent threat (APT) group APT28 (also known…

AI Toy’s Exposed Admin Panel Risked Children’s Personal Data and Conversations Security researchers Joseph Thacker and Joel Margolis…

High-Severity Flaw in Rancher Manager Exposes Admin Credentials via MITM Attacks A newly disclosed vulnerability in Rancher Manager, tracked as…

Critical Authentication Bypass Flaw in ClawDBot Enables Remote Code Execution A high-severity vulnerability (GHSA-g8p2-7wf7-98mq) in ClawDBot, a widely used npm…

ZAP Project Identifies Memory Leak in JavaScript Engine Affecting Active Scans The OWASP ZAP project has uncovered a memory leak…

New PUA Exploits Legitimate IT Tool to Enable Silent Cyberattacks Researchers from Point Wild’s Lat61 Threat Intelligence Team have…

Exposed ATM Router Raises Man-in-the-Middle Attack Risks A recent discovery highlights a critical hardware security oversight in an ATM installation,…