Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to…
Tag: Vulnerability
Cisco says software vulnerability could let hackers crash firewalls
Threat actors have already begun exploiting the flaw, according to the U.S. government.
Patch Tuesday: Update now to fix 421 flaws, including three zero-days
Microsoft’s August Patch Tuesday fixes 421 vulnerabilities, including three zero-days, 62 critical flaws, and dozens of Office remote code execution bugs.
Lazarus exploits Windows zero-day in Operation Dream Job
The North Korean state-sponsored threat actor Lazarus Group has launched a new wave of its Operation Dream Job campaign, exploiting a Windows zero-day…
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day
Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit
Microsoft Defender ShieldBreak zero-day
A new zero-day vulnerability affecting Microsoft Defender has been publicly disclosed by a threat actor called Nightmare Eclipse.
GeoServer Zero-Day SQL Injection Vulnerability Actively Exploited to Gain RCE
A newly disclosed, unpatched SQL injection vulnerability in GeoServer is currently being actively tested across the internet. Researchers have issued…
GeoServer 0-Day Vulnerability Enables Remote Code Execution Attacks
A newly disclosed zero-day vulnerability in GeoServer is being targeted by attackers, raising concern for organizations that publish or manage geospatial…
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.…
ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch
Chaotic Eclipse released a PoC for ShieldBreak, a Microsoft Defender zero-day that bypasses the CVE-2026-50656 patch and could enable SYSTEM-level code…
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept…
Hackers Exploiting Unpatched GeoServer Zero-Day
The security defect is described as an SQL injection that could allow attackers to achieve remote code execution.
Microsoft Patch Tuesday for August 2026 Fixed a Zero-Day and Wormable RCE
Microsoft Patch Tuesday for August 2026 fixes 398 CVEs, including an actively exploited zero-day and a wormable DNS flaw enabling remote code execution.…
Nightmare Eclipse drops ShieldBreak zero-day, US recruits cyber privateers, California bolstering cyber defenses
Windows Defender Zero-Day ‘ShieldBreak,’ California’s AI Cyber Defense, and US ‘Cyber Privateers’ A researcher known as Nightmare Eclipse published a new…
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415…
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core…
Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure
Hackers began targeting a critical Adobe Commerce flaw that could let unauthenticated attackers hijack customer accounts and access private data. Hackers…
State Sponsored Hackers Use Fake Job Offers to Deliver New Zero Day Exploit
It typically begins the same way it has for years, with an approach from a recruiter offering a role at a company the target would recognize, accompanied…
Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery
Hackers Actively Exploiting Microsoft SharePoint Vulnerability Following PoC Release
Threat actors have wasted no time weaponizing a newly disclosed Microsoft SharePoint authentication bypass, launching real-world attacks against…