Tag: Vulnerability

Ivanti Connect Secure Zero-Day Exploited

2026-10-30 16:10

A sophisticated threat actor has exploited multiple zero-day vulnerabilities in Ivanti Connect Secure VPN appliances to gain root-level access to…

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 19, 2026 to October 25, 2026)

2026-10-30 16:10

Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to…

CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229

2026-10-30 15:10

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-97229, a critical vulnerability affecting both GitLab Community…

Fresh WordPress Vulnerability in Attackers’ Crosshairs

2026-10-30 14:10

Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.

Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials

2026-10-30 14:10

Hackers exploited a chain of zero-day vulnerabilities in Ivanti Connect Secure (ICS) VPN appliances, allowing them to execute commands with root access,…

Drupal Commerce Core Vulnerability Exploited Against Online Stores

2026-10-30 13:10

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

Millions of security cameras at risk: DoS vulnerability in Intelbras devices

2026-10-30 13:10

During our research, we discovered a denial-of-service vulnerability that could affect millions of Intelbras IP camera systems built on the platform…

New Cisco firewall zero-day exploited to crash SSL VPN devices

2026-10-30 12:10

Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that…

Volt Typhoon Used Silent Train to Hide Zero-Day Attacks

2026-10-30 12:10

Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s…

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

2026-10-30 12:10

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

CISA Warns of GitLab Integer Overflow Vulnerability Exploited in Attacks

2026-10-30 11:10

The Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting CVE-2026-97229. This GitLab vulnerability could allow code…

HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js

2026-10-30 10:10

The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.…

ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws

2026-10-30 09:10

The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it…

Critical Linux Kernel Vulnerability Lets Remote Attackers Crash Ubuntu Systems

2026-10-30 09:10

A critical vulnerability in the Linux kernel, identified as CVE-2026-98432, threatens Ubuntu systems through a networking memory flaw that could cause…

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

2026-10-30 08:10

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited…

New Zero-Click Android Vulnerability Lets Attackers Crash Phones With a Single SMS

2026-10-30 08:10

A recently discovered Android vulnerability, referred to as SMS of Death, allows attackers to crash a phone’s telephony process with just one malformed…

CISA Warns of Linux Kernel Missing Initialization Vulnerability Exploited in Attacks

2026-10-30 08:10

The U.S. Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting a Linux kernel vulnerability (CVE-2026-46300) that can…