vulnerabilities

June 19, 2026

Critical Path Traversal Vulnerability in Avada Builder Threatens Over One Million WordPress Installations

A high-severity security flaw has been identified in the widely utilized Avada (Fusion) Builder WordPress plugin, posing a significant risk…
Read More »
June 19, 2026

Security Alert: Critical “MaXSS” and “Spyder” Vulnerabilities Compromise Millions of AI-Powered Chrome Extension Users

A series of high-severity security flaws has been identified in widely deployed Chrome extensions, potentially exposing millions of users to…
Read More »
June 19, 2026

Urgent Remediation Required: Active Exploitation of Splunk Enterprise Authentication Bypass (CVE-2026-20253)

The Cybersecurity and Infrastructure Security Agency (CISA) has escalated the threat level for a critical vulnerability within Splunk Enterprise, designated…
Read More »
June 19, 2026

Critical Security Update: Node.js Patches 12 Vulnerabilities Including High-Severity DoS and Authentication Bypasses

The Node.js security team has released a vital set of patches addressing 12 distinct vulnerabilities across all currently supported release…
Read More »
June 19, 2026

Evolution of the INC Ransomware Ecosystem: From Emerging Threat to Top-Tier RaaS

The INC ransomware group has undergone a significant metamorphosis, transitioning from a niche emerging threat into one of the most…
Read More »
June 18, 2026

Urgent Security Advisory: Critical Remote Code Execution and DoS Vulnerabilities in NGINX Components

F5 has issued an emergency out-of-band security notification following the discovery of several high-severity vulnerabilities within the NGINX ecosystem. These…
Read More »
June 18, 2026

RoguePlanet: Critical Zero-Day CVE-2026-50656 Compromises Microsoft Defender via Symlink Flaw

Microsoft has officially acknowledged a critical zero-day vulnerability, identified as CVE-2026-50656, which impacts the Microsoft Defender security suite. The disclosure…
Read More »
June 18, 2026

Critical Information Disclosure in Gravity SMTP Plugin: Active Exploitation of API Credentials

Security researchers have identified a significant information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is currently being leveraged…
Read More »
June 18, 2026

Critical Command Injection and Data Exfiltration Vulnerabilities Identified in Splunk AI Toolkit

Splunk has issued a critical security advisory regarding a significant vulnerability discovered within its AI Toolkit. This flaw provides a…
Read More »
June 17, 2026

Critical Alert: Active Exploitation of Authentication Bypass in Oracle PeopleSoft (CVE-2026-35273)

The Cybersecurity and Infrastructure Security Agency (CISA) has escalated its warning regarding a critical security flaw within the Oracle PeopleSoft…
Read More »
June 17, 2026

27-Year Authentication Bypass and Kernel Heap Over-read Fixed in OpenBSD’s PPP Stack

A critical architectural flaw has been identified within the OpenBSD Point-to-Point Protocol (PPP) stack, specifically targeting the Password Authentication Protocol…
Read More »
June 16, 2026

Stealth via Infrastructure: How DragonForce Leverages Microsoft Teams TURN Relays for C2

In a sophisticated display of living-off-the-trusted-infrastructure, the DragonForce ransomware group has successfully weaponized Microsoft Teams’ backend architecture to mask malicious…
Read More »
June 16, 2026

Active Exploitation Detected: Critical Vulnerabilities Targeting Fortinet FortiSandbox Infrastructure

The cybersecurity landscape has seen a rapid escalation in activity as threat actors pivot toward targeting core security infrastructure. Recent…
Read More »
June 16, 2026

Advanced Phishing Evolution: UNC1151 Targets Gmail with Real-Time 2FA Interception

The threat actor known as Ghostwriter (UNC1151) has significantly upgraded its operational capabilities, moving beyond localized phishing to execute sophisticated,…
Read More »
June 16, 2026

The “SearchLeak” Attack Chain: Analyzing the Critical Data Exfiltration Vulnerability in Microsoft 365 Copilot

Microsoft 365 Copilot, while revolutionizing enterprise productivity, has been revealed to harbor a sophisticated vulnerability known as “SearchLeak.” This critical…
Read More »
June 15, 2026

The Anatomy of SearchJack: Exploiting Chrome Settings for Large-Scale Affiliate Revenue

A sophisticated, coordinated campaign involving 23 seemingly benign Chrome extensions—tracked under the moniker “SearchJack”—has successfully compromised the default search configurations…
Read More »
June 15, 2026

Critical Authentication Bypass in Palo Alto Networks GlobalProtect: Technical Deep Dive and Mitigation Strategies

Palo Alto Networks has issued a high-priority security advisory following the confirmed active exploitation of a critical vulnerability in its…
Read More »
June 12, 2026

Regulatory Intervention: Anthropic Suspends Fable 5 and Mythos 5 Following Export Control Directive

In a significant escalation of government oversight regarding frontier AI, Anthropic has initiated a total suspension of access to its…
Read More »
June 12, 2026

Critical Security Advisory: Addressing New PAN-OS Vulnerabilities in PA-Series and VM-Series Appliances

Palo Alto Networks has released urgent security patches to address three distinct vulnerabilities within PAN-OS. These flaws represent a significant…
Read More »
June 12, 2026

Critical Security Breach Alleged Against Tchap: French Government Communication Infrastructure Compromised

A significant cybersecurity incident has reportedly targeted Tchap, the sovereign, secure messaging platform utilized by French government agencies. Initial reports…
Read More »

Previous page Next page