CWE-269 - Improper Privilege Management

Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

Chinese Operator Breaches Philippine Nuclear and Naval Entities

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation

Critical Authorization Vulnerability in SiYuan (CVE-2026-66012)

Ubiquiti Patches Critical Vulnerabilities in UniFi OS Exposing Remote Attacks

Critical Privilege Escalation Vulnerability in ProfileGrid Plugin for WordPress

Critical Vulnerabilities in Veeam Software Expose Systems to Remote Attacks

Pre-Auth RCE Vulnerability in Marimo Exposed

NightEagle APT Targets Russian Enterprises with Advanced Malware

Critical Command Injection and DoS Vulnerabilities in openSUSE pcp

Coruna and DarkSword iOS Exploit Kits Targeting Users Globally

Critical CVE Fixes for Fedora NetworkManager Plugins Released

Cloud Atlas APT Group Exploits CVE-2018-0802 and Modifies termsrv.dll for RDP Access

VerdantBamboo's 18-Month Cyber Campaign Targets Managed Service Providers

Multiple CVEs Exploited in Cybersecurity Threats: September 2026

Multiple Critical CVEs Exploited in Cybersecurity Attacks

Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems

Critical Security Flaws in Oracle Linux Java 21 OpenJDK

Critical Januscape Vulnerability in Linux KVM Exposes Cloud Servers to Attacks

Critical Vulnerabilities in X.Org X Server Lead to Potential DoS and Privilege Escalation

Multiple Vulnerabilities in cPanel & WHM Posed Security Risks

Critical Local Privilege Escalation Fix for Ansible Collection in Fedora

Critical Tails Linux Vulnerability Exposes Users to Deanonymization Risks

Cisco IOS XR Vulnerabilities Require Immediate Patching

Critical MOVEit Vulnerabilities Expose Organizations to Data Breaches

Critical Vulnerability in phpMyFAQ Allows Privilege Escalation

Critical Vulnerabilities in Rocky Linux Affecting Multiple Components

Critical SQL Injection Vulnerability in ProFTPD Allows Remote Code Execution

Oracle Linux Kernel ptrace Vulnerability CVE-2026-46333 Disclosed

Critical Vulnerabilities in dnsmasq Expose Systems to DoS and Code Execution Risks

CISA Flags Active Exploitation of Linux Kernel Vulnerabilities

Critical OpenSSH Vulnerabilities Affecting Multiple Ubuntu Versions

New DirtyClone Vulnerability in Linux Kernel Enables Local Privilege Escalation

Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users

Multiple rsync Vulnerabilities Affect Ubuntu 22.04, 24.04, 25.10, and 26.04 LTS

Fedora Caddy Security Updates Address Multiple CVEs

Microsoft's Record Patch Tuesday in June 2026 Addresses 206 Vulnerabilities

Iranian Hackers Breach US Gas Station Fuel Monitoring Systems

Localized Phishing Campaign Targets Cambodian Organizations with Multi-Stage Malware

Multiple Linux Kernel Vulnerabilities Discovered Affecting Various Subsystems

Ivanti Connect Secure Zero-Day CVE-2026-104935 Exploited in the Wild

CVE-2026-39987: Marimo Remote Code Execution Vulnerability

CVE-2026-102764: BeyondTrust Zero

CVE Alert: CVE-2026-111231 – Netgate

Fake Arch Linux packages push malware with root privileges

CikaBika Bot RAT Uses Discord for C&C

Attackers exploit root vulnerability in Cisco Secure Email Gateway

SUSE glibc Important Local Privilege Escalation Vuln 2026-4669

CVE Alert: CVE-2026-0322 – Palo Alto Networks

CVE-2026

Aisle Matches Anthropic Mythos On Freebsd Zero Days

CikaBika Bot: Inside a Discord RAT

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

IVANTI CONNECT SECURE ZERO

Patch now! Hackers already targeting newly disclosed Ivanti Connect Secure zero

Patch Tuesday

Threat Spotlight Whats Trending Top Cyber Attacker Techniques June 2026 August 2026

Ivanti VPN Zero-Day Exploited in Active Attacks

Attackers chain three Ivanti VPN zero-days for root access

Keycloak Issues 53060

Amazon Fire Tv Cube Root Exploit Enables Full Unlock

CVE 2022 38181 Gazelle

LG Smart TVs Vulnerable to Pre

HackerOne Bug Bounty Disclosure: -mysql-legacy-alias-stale-table-cache-identity-mismatch

CVE Alert: CVE-2026-11318 – Zuler Technology

AgentCorruption

HackerOne Bug Bounty Disclosure: missing-file-privilege-enforcement-in-connect-file-udfs-allows-server-side-file-read-and-write-duong

Agentcorruption One Role To Rule Them All

According to the overview

SVD 2026 1001

CVE Alert: CVE-2026-76266 – Splunk

IT engineer gets 32 months in prison after sabotaging employer

The Same AI That Writes Your Code May Be the Worst Reviewer of It

Progress Patches Four Telerik Fiddler Classic Flaws, Including Privilege Escalation Risk

Android Multiple Vulnerabilities

Google Chrome Multiple Vulnerabilities

Samsung detailed the October security patch 2026

CVE-2026-96940: Critical Microsoft Exchange Server Vulnerability Enables Privilege ...

Diary 33320