Vulnerabilities
The critical remote code execution bug can be exploited without authentication, under the library’s stock default configurations.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Vulnerabilities
Impacting on-premises deployments, the OS command injection allows attackers to access privileged internal functionality.
Ransomware
The critical unsafe deserialization flaw allows attackers to execute arbitrary code remotely, without authentication.
ICS/OT
A researcher has explained how an attacker could exploit these vulnerabilities to target industrial organizations.
Malware & Threats
Noteworthy stories that might have slipped under the radar: Siemens ROX II industrial switch vulnerabilities, Russian Zimbra webmail espionage campaign, Stadler Rail ransomware extortion...
Artificial Intelligence
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you...
Vulnerabilities
The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations.
Vulnerabilities
An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts.
Application Security
Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues.
Vulnerabilities
CVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access.
Vulnerabilities
Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI.
Vulnerabilities
A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure.
Vulnerabilities
The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.
Vulnerabilities
The latest Zimbra refresh resolves command injection, XSS, restriction bypass, and SSRF security defects.
Malware & Threats
The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.
Vulnerabilities
Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory.
Vulnerabilities
The agentic security tool identifies potentially exploitable code flaws, traces attack paths, and recommends targeted remediations.
Vulnerabilities
The fresh security update resolves six critical and high-severity use-after-free vulnerabilities.
Vulnerabilities
Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.
Vulnerabilities
The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)