CWE-287 - Improper Authentication

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited

Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure

Critical RCE Vulnerability in Windows IKE Actively Exploited

GRU Compromises Home Routers in 23 States to Steal Outlook Credentials

Critical WSO2 API Manager Vulnerability Under Active Exploitation

Critical Chrome Zero-Day CVE-2026-85046 Exploited in the Wild

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

Chinese Operator Breaches Philippine Nuclear and Naval Entities

Critical RCE Vulnerability in N-able N-central Requires Immediate Patching

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation

Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited

Critical RCE Vulnerability in IBM Langflow Under Active Exploitation

Critical Authentication Bypass in Rejetto HFS Exploited Within 24 Hours

Critical Vulnerabilities in AhsayCBS Allow Remote Code Execution

Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies

AI-Driven Exploitation of PaperCut Vulnerabilities Compromises 440 Servers Globally

Critical Vulnerability CVE-2026-4767 in TR7 Cyber Defense WAF-ASP

Storm-1175 Deploys New StormEncryptor Ransomware Targeting N-central Systems

Critical Check Point VPN Vulnerability Exploited by Ransomware Gang

Critical CVE-2026-48611 Vulnerability Allows OAuth Account Hijacking

AI-Driven Cyber Attacks Targeting Critical Infrastructure and Data Security

Widespread DNS Poisoning Campaign Targets Hotel Wi-Fi to Steal Credentials

Massive Data Breach at Change Healthcare Affects 190 Million Americans

Critical RCE Vulnerability in Divi Form Builder Plugin for WordPress

Critical Authentication Bypass Vulnerability in Gorse Exposed

Critical Vulnerabilities in FortiOS and Arista VeloCloud Under Active Exploitation

Russian Hackers Breach UK Government Email Accounts in Major Cyber Attack

Critical Vulnerabilities in Veeam Software Expose Systems to Remote Attacks

Pre-Auth RCE Vulnerability in Marimo Exposed

Critical Privilege Escalation Vulnerability in ProfileGrid Plugin for WordPress

Russian FSB Exploits Vulnerable Routers to Target Critical Infrastructure

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

Critical Vulnerability in NASA Ground Control Software Allows Unauthenticated Access

Critical Authorization Vulnerability in SiYuan (CVE-2026-66012)

Critical Authentication Bypass Vulnerability in WordPress Plugin CVE-2026-15341

Critical RCE Vulnerability in Rejetto HFS

New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure

Critical Vulnerability in Issabel Framework Allows Remote Code Execution

Critical Vulnerabilities in Paperclip AI Platform Enable Unauthenticated Command Execution

Critical FreeIPA Vulnerabilities Allow Unauthenticated Admin Access

CVE-2026-111356: MacCMS v10 Password Recovery Vulnerability

Critical cPanel Vulnerability Exploited in Southeast Asia Cyber Attacks

Critical CVE-2026-11624 Vulnerability in Model Context Protocol

Yahoo Confirms Breach of Over 1 Billion Accounts Linked to State-Sponsored Actors

Hacker gets data on millions of California students, state education department says

Hackers breach Microsoft 365 tenants via ConnectWise supply

Hackers Used AI-Written Code to Spy on Government Linux Servers for Months, Unit 42 Finds

FLHSMV Breach Letters Mail This Week [2026]

Exploit for CVE-2026

The OAuth/SAML Authentication Bypass Wave: Seven Months, Eight Vendors, One Structural Failure

Hackers steal personal data of millions of California students in massive breach

CVE Alert: CVE-2026-111680 – APIParkLab

Claroty says Claude reached root access on a Danfoss lab controller

Anthropic’s July disclosure

AD FS Gets Two New Spoofing CVEs the Day DKM Enforcement Activates

Cyber Attack Shuts Down Refrigerators at 700 French Supermarkets, Resulting in Food ...

GHSA 2679 6mx9 H9xc

BeyondTrust zero

A Series Of Unauthenticated Events Chained Exploitation Of Ivanti Connect Secure Zero Days

Microsoft Patches Two Dozen RCE Flaws in Office

BeyondTrust patches zero-day exploited in attacks since August

CERT

Thinkcmf Through 8.0.1 Incorrect Authorization In Admin Rest Api

CVE Alert: CVE-2026-111352 – ThinkCMF

CVE Alert: CVE-2026-111356 – magicblack

CVE Alert: CVE-2026-111277 – nivocart

CVE-2026-39987: Marimo Remote Code Execution Vulnerability

CVE Alert: CVE-2026-111231 – Netgate

Frontegg SAML SSO Plugin for WordPress: How Missing Signature Verification Creates an ...

Cyber alerts

Horizon3.ai on X: "CVE-2026-105133 (CVSS 3.x: 7.3) bypasses API authentication. An ...

Hackers Wrecked French Supermarket Freezers. They Can Do It Again.

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email ...

Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government

What's Behind the French Supermarket Cyberattacks?

ASOS Cyberattack: New Details Emerge After Earlier Breach Affected 138,000+ Customers

What Is Ai Web App Pentesting

Thousands of refrigerators were hacked across France. How worried should you be?

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Papermerge Core Issues 1291

CVE-2026-105133 and CVE-2026-105134

6 Ways To Prevent Privilege Escalation Attacks

Ahsay CBS Auth Bypass RCE

Claroty says Claude reproduced Danfoss flaws in about 28 minutes