Vulnerabilities
The bugs could allow attackers to modify protected resources and escalate their privileges to administrator.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges.
Vulnerabilities
The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs.
Cybercrime
Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.
Vulnerabilities
Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.
Vulnerabilities
Reputable researcher Haifei Li has come across what appears to be a PDF designed to exploit an unpatched vulnerability.
Data Protection
A total of seven vulnerabilities, most of which can be exploited for DoS attacks, have been patched in OpenSSL.
Vulnerabilities
The vulnerability requires authentication for successful exploitation, but another flaw exposes the Jolokia API without authentication.
Vulnerabilities
The vulnerability allows hackers to upload arbitrary files to a site’s server and achieve remote code execution.
Artificial Intelligence
The improper validation of user-supplied JavaScript code allows attackers to execute arbitrary code and access the file system.
Mobile & Wireless
A critical DoS vulnerability in the Framework component of Android has also been fixed with the latest update.
Endpoint Security
Researchers have demonstrated that GPU Rowhammer attacks can be used to escalate privileges.
Network Security
The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely.
Vulnerabilities
A Chinese threat actor exploited the video conferencing platform to perform reconnaissance, escalate privileges, and execute additional payloads.
Vulnerabilities
The vulnerabilities can be chained together to bypass authentication and upload arbitrary files to the server.
Artificial Intelligence
Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found by Adversa AI.
Mobile & Wireless
The DarkSword exploit kit has been used by both state-sponsored hackers and commercial spyware vendors.
Vulnerabilities
The bugs could lead to authentication bypass, remote code execution, information disclosure, and privilege escalation.
Vulnerabilities
Google has announced fixes for CVE-2026-5281, a zero-day affecting Chrome’s Dawn component.
Vulnerabilities
The SQL injection vulnerability allows unauthenticated attackers to execute arbitrary code remotely, via crafted HTTP requests.
Vulnerabilities
Remotely exploitable, the integer underflow vulnerability impacts StrongSwan releases spanning 15 years.
Artificial Intelligence
Researchers found an OpenAI Codex vulnerability that could have been exploited to compromise GitHub tokens.
Vulnerabilities
The critical-severity flaw leaks application memory and can be exploited to obtain authenticated administrative session IDs.
Vulnerabilities
Initially disclosed as a high-severity denial-of-service (DoS), the bug was reclassified as a critical RCE issue.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
(Joshua Goldfarb)