Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Hi, what are you looking for?
SecurityWeek
All posts tagged "vulnerability"
Vulnerabilities
The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.
Vulnerabilities
The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.
Vulnerabilities
Attackers with Author-level user or higher permissions could exploit the flaw via malicious Postscript files.
Vulnerabilities
The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance.
Vulnerabilities
Tracked as CVE-2026–59310, the directory traversal bug allows remote attackers to execute arbitrary code.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Vulnerabilities
The security defects could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data.
Vulnerabilities
CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.
Vulnerabilities
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.
Vulnerabilities
Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine.
Vulnerabilities
SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs.
Vulnerabilities
Remote, unauthenticated attackers could exploit the bugs to cause a denial-of-service (DoS) condition.
Vulnerabilities
The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Vulnerabilities
The browser refresh eliminates over two dozen memory safety bugs, including critical use-after-free flaws.
Artificial Intelligence
Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.
Artificial Intelligence
An attacker could self-register, sign in for board-level API access, and import a new company for code execution.
Vulnerabilities
Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code.
Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Supply Chain Security
Data Breaches
Vulnerabilities
Vulnerabilities
Data Breaches
Hackers used compromised credentials to access enterprise and personal tax-related data.
Artificial Intelligence
Artificial Intelligence
Data Breaches
