Vulnerabilities
The flaws allow threat actors to obtain root privileges or bypass authentication via Telnet and gain shell access as root.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
The vulnerability is tracked as CVE-2026-21509 and it can be exploited to bypass security features.
ICS/OT
More than 20 vulnerabilities were found and patched in Dormakaba physical access control systems.
Vulnerabilities
The critical-severity vulnerability can be exploited via crafted network packets for remote code execution.
Vulnerabilities
Similar to recent FortiCloud single sign-on (SSO) login vulnerabilities, the attacks bypass authentication.
Vulnerabilities
CISA has added the Zimbra flaw to the KEV catalog along with three other bugs exploited in the wild.
Vulnerabilities
Pwn2Own participants disclosed a total of 76 vulnerabilities during the three-day event.
Email Security
The exploitation of the authentication bypass vulnerability started two days after patches were released.
Vulnerabilities
Hackers bypass the FortiCloud SSO login authentication to create new accounts and change device configurations.
Cybersecurity Funding
The startup will use the new funding to accelerate product development and deepen remediation capabilities.
Vulnerabilities
Fixes were rolled out for over two dozen vulnerabilities, including critical- and high-severity bugs.
Vulnerabilities
Cisco has released patches for CVE-2026-20045, a critical vulnerability that can be exploited for unauthenticated remote code execution.
Vulnerabilities
Oracle’s January 2026 CPU resolves roughly 230 unique vulnerabilities across more than 30 products.
Artificial Intelligence
The two bugs, an arbitrary file read and an SSRF bug, can be exploited without user interaction to leak credentials, databases, and other data.
Vulnerabilities
The researcher who discovered the vulnerability saw more than 2,500 internet-exposed devices.
Cybercrime
Other noteworthy stories that might have slipped under the radar: BodySnatcher agentic AI hijacking, Telegram IP exposure, shipping systems hacked by researcher.
Vulnerabilities
UAT-9686 exploited the bug to deploy the AquaShell backdoor on Cisco appliances with certain ports open to the internet.
Endpoint Security
Researchers have disclosed technical details on a new AMD processor attack that allows remote code execution inside confidential VMs.
ICS/OT
Only a dozen new advisories have been published this Patch Tuesday by industrial giants.
Vulnerabilities
Exploitable without authentication, the two security defects could lead to configuration leak and code execution.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)