Vulnerability

Critical WordPress Plugin Vulnerability Exploited in Active Attacks A severe security flaw in the User Registration & Membership WordPress plugin…

AWS-LC Cryptographic Library Flaws Expose Certificate and Signature Validation Risks Amazon has disclosed three critical vulnerabilities in AWS-LC, its open-source…

Critical WordPress Plugin Flaw Exposes Millions of Sites to Full Takeover A newly disclosed critical vulnerability in the WordPress User…

Critical Nginx UI Vulnerability (CVE-2026-27944) Under Active Exploitation A newly disclosed critical vulnerability in Nginx’s user interface (CVE-2026-27944) is…

CISA Adds Critical Hikvision Vulnerability to Exploited Flaws Catalog After Active Attacks On March 5, 2026, the Cybersecurity and Infrastructure…

Critical MongoDB Vulnerability (CVE-2026-25611) Enables Server Crashes via Low-Bandwidth Attacks A high-severity vulnerability (CVE-2026-25611, CVSS 7.5) has been identified…

Critical Authentication Bypass Flaw in pac4j-jwt Exposes Systems to Full Takeover A severe vulnerability in the widely used Java authentication…

Critical FreeScout Vulnerability (CVE-2026-28289) Enables Remote Server Takeover via Malicious Emails A newly disclosed vulnerability in FreeScout, an open-source help…

Critical GitHub RCE Vulnerability (CVE-2026-3854) Exposed Millions of Private Repositories Security researchers at Wiz uncovered a severe remote code execution…

Iranian Hackers Exploit Surveillance Cameras in Middle East Ahead of Potential Attacks Since February 28, Iranian-linked hacking groups have targeted…

Nebraska Bank Settles MOVEit Breach Lawsuit for $2.4 Million On March 4, 2026, a family-owned Nebraska bank agreed to…

Zerobot Botnet Exploits Tenda and n8n Vulnerabilities in Ongoing Campaign Akamai’s Security Incident Response Team (SIRT) has uncovered an…