Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Vulnerabilities
Three of the security defects are high-severity flaws, two of which were found and reported by Google.
Government
Rewards for exploits are reportedly much smaller than in the contest’s glory days.
Artificial Intelligence
Developers must view AI as a collaborator to be closely monitored, rather than an autonomous entity to be unleashed. Without such a mindset, crippling...
Vulnerabilities
Impacting the ‘dyld’ system component, the memory corruption issue can be exploited for arbitrary code execution.
Vulnerabilities
It also fixed a high-severity authentication bypass that could be exploited remotely without authentication to obtain credentials.
Endpoint Security
More than two dozen advisories have been published by the chip giants for vulnerabilities found recently in their products.
Vulnerabilities
The bugs could be exploited without authentication for command execution and authentication bypass.
Cloud Security
Dozens of vulnerabilities, bugs, and potential improvements have been identified by the tech giants’ security teams.
ICS/OT
Several vulnerabilities have been patched and mitigated across the industrial giants’ products.
Vulnerabilities
Microsoft’s Patch Tuesday updates fix roughly 60 vulnerabilities found in the company’s products.
Vulnerabilities
The company has fixed several critical vulnerabilities that can be exploited for arbitrary code execution.
Vulnerabilities
SAP has released 26 new and one updated security notes on February 2026 security patch day.
Vulnerabilities
Affecting both RS and PRA, the bug can be exploited remotely via crafted requests without authentication.
Vulnerabilities
Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access.
Risk Management
The KEV list is useful but largely misunderstood. KEVology explains what it is, and how best to use it.
Vulnerabilities
The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.
Government
CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.
Application Security
VS Code-integrated configuration files are automatically executed in Codespaces when the user opens a repository or pull request.
Vulnerabilities
The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)