Security researchers have revealed a critical vulnerability in Discourse, tracked as CVE-2026-55420. This flaw could let a low-privileged user read and…
Tag: Vulnerability
CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks
CISA has added a long-standing Apache Struts flaw, tracked as CVE-2016-3081, to its Known Exploited Vulnerabilities catalog after confirming that…
Months-Old Palo Alto VPN Vulnerability Remains a Target for Ransomware Groups
ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May
Critical SonicWall Vulnerability Exploited Days After Disclosure
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges
Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn. This vulnerability allows remote…
Ransomware Hackers Exploit Palo Alto Networks GlobalProtect VPN Authentication Bypass Vulnerability
Ransomware operators are actively exploiting CVE-2026-0257, an authentication bypass vulnerability affecting Palo Alto Networks PAN-OS GlobalProtect and…
AI vulnerability patching has a grading problem
Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the…
AI Adds to Open-Source Security Pressure as Vulnerability Reports Surge
AI Adds to Open-Source Security Pressure as Vulnerability Reports Surge A growing number of security vulnerabilities are being discovered using artificial…
Public Exploit Reveals Critical AnyDesk Linux Vulnerability That Could Allow Root Access
Security experts have released a functional exploit demonstrating how a vulnerability in AnyDesk for Linux could be abused to gain the highest level of…
Atlassian CVE-2026-21589 Exploited Hours After Public Disclosure
Attackers started scanning the systems vulnerable to the Atlassian flaw several hours after the researchers published the technical details and…
Two AhsayCBS Zero-Day Vulnerabilities Actively Exploited to Take Over Backup Servers
Threat actors are exploiting two zero-day vulnerabilities in Ahsay Cloud Backup Server (AhsayCBS) to compromise exposed backup servers without…
Pwn2Own Hackers Find 32 Zero-Day Vulnerabilities on Day One
Ethical hackers have already found 32 zero days in various products at Pwn2Own Ireland
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 28, 2026 to October 4, 2026)
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to…
Claude Helps Secure Open Source as Anthropic Offers Free Vulnerability Scanning
Anthropic launches free OSS Scanner, using AI to find open-source vulnerabilities and help maintainers fix bugs before attackers exploit them. Anthropic…
Microsoft Exchange Vulnerability Could Leak Confidential Organizational Info
Microsoft has issued an emergency security update to fix a vulnerability in Exchange Server that could expose confidential organizational communications.…
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI).…
Citrix NetScaler Critical RCE Flaw CVE-2026-107406
Citrix has issued an urgent security advisory for CVE-2026-107406, a critical vulnerability in NetScaler ADC and NetScaler Gateway that could allow…
React Server Components Vulnerability Lets Attackers Freeze Next.js Servers With a Single Request
A security vulnerability has been identified in React Server Components deployments using specific vulnerable releases of React 19. An attacker can…
High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring
Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity flaw in NVIDIA’s DCGM Exporter (CVE-2026-47483) that lets…
Atlassian Vulnerability Comes Under Attack Hours After Details Go Public
Threat actors are exploiting CVE-2026-21589, a critical Atlassian flaw that can expose sensitive files across multiple Data Center products. Threat actors…