Vulnerabilities
The browser refreshes resolve critical and high-severity vulnerabilities that could lead to arbitrary code execution.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
Vulnerabilities
The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs.
Cybercrime
Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.
Vulnerabilities
Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.
Vulnerabilities
The remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.
Vulnerabilities
A fake RPC server can be used to listen for RPC requests and impersonate the target service to elevate privileges to System.
Vulnerabilities
The initial vulnerability was exploited by Russia-linked APT28 in attacks against Ukraine and EU countries.
Vulnerabilities
A code reuse issue enabled comma characters in certificate principals to be interpreted as list separators.
Endpoint Security
A race condition in PackageKit allows unprivileged users to escalate privileges when installing packages.
Privacy
The vulnerability is tracked as CVE-2026-6770 and it has been patched with the release of Firefox 150 and Tor 15.0.10.
Endpoint Security
CrowdStrike has fixed a critical LogScale vulnerability, while Tenable addressed a high-severity Nessus flaw.
Data Protection
Apple rolled out the security patches for dozens of iPhone and iPad models and generations.
Vulnerabilities
The flaw allows attackers to access the SAM database, extract NTLM hashes, and gain System privileges.
Artificial Intelligence
All the flaws could have also been found by an elite human researcher, according to Mozilla.
Artificial Intelligence
Researchers discovered a remote code execution vulnerability and cybercriminals are using its reputation to deliver malware.
Vulnerabilities
The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws.
Vulnerabilities
Things are improving, but a researcher has still identified over 1,500 Perforce P4 instances allowing attackers to read files on the server.
Vulnerabilities
The security defects could be exploited for remote code execution, OS command injection, and WAF detection bypass.
Vulnerabilities
CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.
ICS/OT
Forescout researchers discovered 20 new vulnerabilities in Lantronix and Silex products and described theoretical attack scenarios.
Vulnerabilities
In-the-wild exploitation has been ongoing for a year, but no successful payload execution has been observed.
Government
Other noteworthy stories that might have slipped under the radar: ShinyHunters targets Rockstar Games, ShowDoc vulnerability exploited in the wild, and EPA to boost...
Vulnerabilities
The remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
(Joshua Goldfarb)