Vulnerabilities
The recently patched CVE-2026-22719 can be exploited by an unauthenticated attacker for remote code execution.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.
Vulnerabilities
Attackers with Author-level user or higher permissions could exploit the flaw via malicious Postscript files.
Vulnerabilities
The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance.
Vulnerabilities
Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code.
Mobile & Wireless
An integer overflow or wraparound in the Qualcomm graphics component, the bug leads to memory corruption.
Artificial Intelligence
Improper input sanitization in the framework can be exploited through the Shell tool, allowing attackers to modify system files and steal data.
Artificial Intelligence
Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files.
Artificial Intelligence
Malicious websites could open a WebSocket connection to localhost on the OpenClaw gateway port, brute force passwords, and take control of the agent.
Vulnerabilities
The attacks exploited a post-authentication command injection vulnerability in the endpoint manager’s interface.
Vulnerabilities
An out-of-band security update for Junos OS Evolved patches the remote code execution vulnerability CVE-2026-21902.
Vulnerabilities
Anthropic has patched vulnerabilities whose impact was demonstrated by Check Point via malicious configuration files.
Vulnerabilities
The issue impacts the UPnP function of multiple device models and could be exploited for remote code execution.
Endpoint Security
TrendAI has fixed eight critical and high-severity issues in Windows and macOS endpoint security products.
Malware & Threats
Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.
Vulnerabilities
The four security defects could be exploited for remote code execution but require administrative privileges.
Vulnerabilities
Broadcom has patched several vulnerabilities in VMware Aria Operations, including high-severity flaws.
Vulnerabilities
Attackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue.
Nation-State
The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.
Email Security
Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.
Vulnerabilities
The flaw tracked as CVE-2026-2329 can be exploited without authentication for remote code execution with root privileges.
Ransomware
CISA has updated its KEV entry for CVE-2026-1731 to alert organizations of exploitation in ransomware attacks.
Malware & Threats
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware.
Vulnerabilities
Novee researchers discovered 16 vulnerabilities in Foxit and Apryse PDF tools that could have been exploited via malicious documents or URLs.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)