Vulnerabilities
The flaws can be exploited remotely to impersonate users or execute arbitrary commands on the underlying OS.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Vulnerabilities
Hackers are exploiting CVE-2026-33032, a critical remote takeover vulnerability in the Nginx UI management tool.
Artificial Intelligence
Researchers warn that a flaw in Anthropic’s Model Context Protocol allows unsanitized commands to execute silently, enabling full system compromise across widely used AI...
Vulnerabilities
The flaws could allow a remote attacker to maintain access after their account has been disabled and to access information from other user sessions.
Vulnerabilities
The flaws could allow attackers to bypass authentication or execute arbitrary code or commands via HTTP requests.
Vulnerabilities
Experts say this is the second-largest Microsoft Patch Tuesday ever based on CVE count.
Vulnerabilities
Critical ColdFusion vulnerabilities are the most at risk of being exploited in attacks, according to the software giant.
Artificial Intelligence
CISOs face a shrinking window to prepare as AI models like Mythos collapse the gap between vulnerability discovery and exploitation, driving a new era...
Vulnerabilities
The company has released 19 new security notes addressing flaws in over a dozen enterprise products.
Vulnerabilities
The security defects allow attackers to escalate privileges and execute arbitrary code remotely.
Vulnerabilities
The vulnerability is tracked as CVE-2026-34621 and Adobe has confirmed that it can be exploited for arbitrary code execution.
Vulnerabilities
A critical-severity flaw could be exploited remotely, without authentication, to take over a vulnerable device.
Vulnerabilities
Attackers could exploit these vulnerabilities in denial-of-service, information disclosure, and arbitrary code execution attacks.
Vulnerabilities
The critical vulnerabilities affect Chrome’s WebML component and they have been reported by anonymous researchers.
Vulnerabilities
Within nine hours, a hacker built an exploit from the unauthenticated bug’s advisory and started using it in the wild.
Mobile & Wireless
The security hole affected an EngageLab SDK and it was reported by Microsoft to the vendor one year ago.
Vulnerabilities
The bugs could allow attackers to modify protected resources and escalate their privileges to administrator.
Vulnerabilities
Reputable researcher Haifei Li has come across what appears to be a PDF designed to exploit an unpatched vulnerability.
Data Protection
A total of seven vulnerabilities, most of which can be exploited for DoS attacks, have been patched in OpenSSL.
Vulnerabilities
The vulnerability requires authentication for successful exploitation, but another flaw exposes the Jolokia API without authentication.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)