Vulnerabilities
The critical-severity flaw allows attackers to send HTTP requests to internal endpoints and extract sensitive information.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.
Vulnerabilities
Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution.
ICS/OT
Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.
Vulnerabilities
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
Vulnerabilities
The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks.
Vulnerabilities
Remote, unauthenticated attackers could exploit the critical-severity flaw without user interaction.
Vulnerabilities
CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.
Vulnerabilities
The flaws can be exploited for remote code execution, authentication bypass, and device takeover.
Vulnerabilities
The fixes resolve over 1,000 vulnerabilities across two dozen products, including over 460 remotely exploitable bugs.
Vulnerabilities
The bugs could lead to code execution, privilege escalation, sandbox escape, and information disclosure.
Artificial Intelligence
Join the live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as...
Artificial Intelligence
Rapid7 warns that traditional patch cycles cannot keep pace with soaring vulnerability disclosures and faster exploitation, forcing defenders to prioritize exposure over severity scores.
Vulnerabilities
Tracked as CVE-2026-15748, the arbitrary file upload bug allows unauthenticated attackers to upload executable files.
Vulnerabilities
The security defect allows unauthenticated attackers to modify or delete user data and public projects.
Mobile & Wireless
The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data.
Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Vulnerabilities
The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.
Vulnerabilities
Noteworthy stories that might have slipped under the radar: government AI platform deal sparks outrage, North Korean IT worker breaches federal agency, DEF CON...
Vulnerabilities
The security defect is described as an SQL injection that could allow attackers to achieve remote code execution.
Vulnerabilities
The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.
Vulnerabilities
Attackers with Author-level user or higher permissions could exploit the flaw via malicious Postscript files.
Vulnerabilities
The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance.
Vulnerabilities
Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code.
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
(Matias Madou)
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
(Etay Maor)
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
(Joshua Goldfarb)
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.
(Steve Durbin)
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)