Vulnerabilities
The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
ICS/OT
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
Artificial Intelligence
AI infrastructure introduces new security risks that traditional data center designs were never built to handle.
Vulnerabilities
The flaws could allow attackers to access credentials and data, take over accounts, and escalate their privileges.
Vulnerabilities
Attackers could exploit the bugs to modify configurations, terminate or restart processes, cross security boundaries, leak memory, and execute code.
Vulnerabilities
The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability.
Endpoint Security
The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products.
Artificial Intelligence
An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically.
Risk Management
Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.
Vulnerabilities
A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code.
Vulnerabilities
The company has rolled out a fix and is restoring access for Storage Zones Controller customers who apply it.
Vulnerabilities
Public exploit code targeting the Firefox flaws exists, but no in-the-wild exploitation has been observed.
Vulnerabilities
SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution.
Vulnerabilities
Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed.
Vulnerabilities
The ColdFusion security defects could allow attackers to execute arbitrary code or elevate their privileges.
Vulnerabilities
The flaws can be exploited for authentication bypass, remote code execution, privilege escalation, and directory traversal.
Vulnerabilities
The flaws could allow attackers to access and modify data, and cause system unavailability and request-response desynchronization.
Vulnerabilities
Unauthenticated attackers could obtain the broker's confidential OAuth client secret, allowing them to take control of the broker.
Email Security
The flaw results in malicious code embedded in crafted emails being executed when the emails are opened.
Vulnerabilities
Threat actors have been targeting Balbooa Forms and iCagenda Joomla extension flaws for remote code execution.
Vulnerabilities
The company notified customers to manually shut down their servers while it is investigating a credible threat.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)