Vulnerabilities
Introduced in 2008, the critical-severity security defect was patched this week in NGINX Plus and NGINX open source.
Hi, what are you looking for?
SecurityWeek
All posts tagged "vulnerability"
Vulnerabilities
The refresh resolves critical-severity use-after-free and other types of bugs in various browser components.
Vulnerabilities
The company’s latest quarterly advisory describes high and medium-severity issues in BIG-IP, BIG-IQ, and NGINX.
Artificial Intelligence
The first exploitation attempts were observed less than four hours after the authentication bypass was publicly disclosed.
Vulnerabilities
The patch was announced as Broadcom is attending the Pwn2Own hacking competition in Berlin this week.
Artificial Intelligence
Microsoft’s MDASH discovered 16 of the Patch Tuesday vulnerabilities, and Palo Alto used Mythos to find dozens of flaws.
Email Security
CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”.
Vulnerabilities
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.
Vulnerabilities
The two chip giants have published over two dozen advisories describing recently identified security defects.
ICS/OT
Many ICS vendors have not released new advisories for the May 2026 Patch Tuesday.
Vulnerabilities
Fresh security updates resolve critical flaws in Azure, Windows, Dynamics 365, and the SSO Plugin for Jira & Confluence.
Vulnerabilities
While none of the flaws have been exploited in the wild, many of them could lead to arbitrary code execution.
Vulnerabilities
The flaws could allow attackers to inject malicious code, leading to information disclosure and code execution.
Artificial Intelligence
Curl’s lead developer says Mythos claims are marketing, but many in the industry believe the results stem from Curl’s robust security.
Artificial Intelligence
Lax extension permissions and improper trust implementation allow attackers to inject prompts in the Claude Chrome extension.
Vulnerabilities
CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code.
Vulnerabilities
The fresh browser update resolves critical-severity integer overflow and use-after-free vulnerabilities.
Network Security
Successful exploitation of the flaws could lead to code execution, server-side request forgery attacks, and denial-of-service conditions.
Artificial Intelligence
Attackers could inject prompts into a GitHub issue and take over the AI agent designed to automatically triage the issue.
Vulnerabilities
CVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
