Vulnerabilities
The high- and medium-severity flaws could lead to denial-of-service, secure boot bypass, information disclosure, and privilege escalation.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Endpoint Security
Apple released security fixes for older devices as well, in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5.
Vulnerabilities
The software refresh fixes eight memory safety bugs affecting seven Chrome components.
Vulnerabilities
An out-of-bounds read vulnerability can be exploited remotely without authentication to read sensitive information from memory.
Vulnerabilities
The flaws could allow attackers to access sensitive information, execute code, or cause unexpected behavior.
Vulnerabilities
CVE-2026-21992 can be used without authentication for remote code execution and it may have been exploited in the wild.
Vulnerabilities
The vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector.
Artificial Intelligence
Because attacker-supplied flow data is used in public flows, the bug leads to unauthenticated remote code execution.
Vulnerabilities
Latest ScreenConnect version adds encrypted storage and management to prevent unauthorized access to machine keys.
Malware & Threats
Insufficient sanitization of CSS content within HTML emails leads to inline script execution when the message is opened in a browser.
Vulnerabilities
The SharePoint remote code execution vulnerability CVE-2026-20963, which Microsoft patched in January, has been exploited in the wild.
Ransomware
Amazon found evidence that the FMC software vulnerability has been exploited since late January, and found links to Russia.
Artificial Intelligence
With exploitation of vulnerabilities taking just days, preemptive security must be the new model for defenders.
Mobile & Wireless
Targeting six iOS vulnerabilities and leading to full device compromise, the exploit chain is meant for surveillance.
Privacy
Meta does not plan on fixing the vulnerability because it involves the use of a modified client application.
Vulnerabilities
Tracked as CVE-2025-47813, the flaw leads to the disclosure of the full local installation path of the application.
Vulnerabilities
The vulnerability can be exploited remotely, without authentication, to circumvent existing authentication controls.
Vulnerabilities
Google paid over $3.7 million for Chrome vulnerabilities, and more than $3.5 million for cloud security defects.
Vulnerabilities
The flaws can be exploited to manipulate data and bypass security restrictions, potentially leading to code execution.
Vulnerabilities
The issue allows attackers to inject SQL queries and extract sensitive information from the database.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)