Vulnerability

Active Exploitation of High-Severity Django SQL Injection Flaw Targets PostGIS-Backed Applications A critical SQL injection vulnerability (CVE-2026-1207) in Django’s…

Millions of RDP and VNC Servers Exposed, Heightening Cybersecurity Risks to Critical Infrastructure New research from Forescout Technologies’ Vedere Labs…

Critical Vulnerabilities in Building Management Systems Expose Infrastructure to Cyberattacks Research from Claroty’s Team82 reveals that the widespread adoption…

Microsoft Patches Actively Exploited Zero-Day in Windows Desktop Window Manager Microsoft has released emergency security updates to address CVE-2026-21519, a…

Large-Scale Citrix ADC Gateway Reconnaissance Campaign Uncovered A sophisticated reconnaissance campaign targeting Citrix ADC (NetScaler) Gateway infrastructure has been detected,…

Medium-Severity Vulnerability in Iconics Suite SCADA Systems Exposes Critical Infrastructure to DoS Attacks A medium-severity vulnerability (CVE-2025-0921) in Mitsubishi Electric’…

High-Severity Command Execution Flaw Disclosed in Hikvision Wireless Access Points A critical authenticated command execution vulnerability, tracked as CVE-2026-0709, has…

Ivanti Discloses Two Critical EPMM Vulnerabilities with Active Exploitation Ivanti has revealed two critical vulnerabilities in its Endpoint Manager Mobile…

Russian APT28 Exploits Microsoft Office Zero-Day Within Days of Patch Release Russia-linked advanced persistent threat (APT) group APT28 (also known…

AI Toy’s Exposed Admin Panel Risked Children’s Personal Data and Conversations Security researchers Joseph Thacker and Joel Margolis…

Microsoft Azure Portal Dependency Confusion Vulnerability Disputed by MSRC Despite RCE Evidence In January 2026, security researcher Wahid Fayad uncovered…

High-Severity Flaw in Rancher Manager Exposes Admin Credentials via MITM Attacks A newly disclosed vulnerability in Rancher Manager, tracked as…