Vulnerabilities
The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
Vulnerabilities
The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs.
Cybercrime
Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.
Vulnerabilities
Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.
Government
CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.
Application Security
VS Code-integrated configuration files are automatically executed in Codespaces when the user opens a repository or pull request.
Vulnerabilities
The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets.
Vulnerabilities
The security defects can lead to DoS conditions, arbitrary command execution, and privilege escalation.
Cloud Security
The flaws dubbed LookOut can be exploited for remote code execution and data exfiltration.
Artificial Intelligence
The critical vulnerability exists in the contextual trust in MCP Gateway architecture, as instructions are passed without validation.
Vulnerabilities
Two IP addresses accounted for the majority of the 1.4 million exploitation attempts observed over the past week.
Vulnerabilities
The critical-severity SolarWinds Web Help Desk flaw could lead to unauthenticated remote code execution.
Artificial Intelligence
Wiz and Permiso have analyzed the AI agent social network and found serious security issues and threats.
Malware & Threats
Albeit mainly considered a theoretical risk, the flaw has been exploited to disable protections and deliver malware.
Malware & Threats
The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.
Vulnerabilities
The critical-severity vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely.
Vulnerabilities
The two bugs impacted n8n’s sandbox mechanism and could be exploited via weaknesses in the AST sanitization logic.
Vulnerabilities
The four critical flaws could be exploited without authentication for remote code execution or authentication bypass.
Malware & Threats
Russian and Chinese state-sponsored threat actors have been exploiting CVE-2025-8088 since July 2025.
Vulnerabilities
Tracked as CVE-2026-24858, the bug allows attackers to log into devices registered to other FortiCloud accounts.
Data Protection
A total of 12 vulnerabilities have been fixed in OpenSSL, all discovered by a single cybersecurity firm.
Vulnerabilities
The flaws allow threat actors to obtain root privileges or bypass authentication via Telnet and gain shell access as root.
Vulnerabilities
The vulnerability is tracked as CVE-2026-21509 and it can be exploited to bypass security features.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
(Joshua Goldfarb)