UTA0576 exploits CVE-2026-104935 and chained Ivanti Connect Secure flaws to gain root access using in-memory payloads and log ...

Japanese web systems face rising data leaks as attackers exploit API flaws, weak authentication, and software vulnerabilities ...

Fake event invitations lead victims through RSVP and CAPTCHA pages to install a RAT, enabling attackers to remotely control ...

Node.js has released security updates addressing CVE-2026-111497, a high-severity vulnerability in its bundled Brotli decompression code that can potentially enable remote code execution. The flaw is ...

Just as organizations were working to patch the Microsoft Office zero-day (CVE-2026-21509), the cybersecurity world is confronted with another serious threat. OpenSSL disclosed a high-severity stack ...

Microsoft has patched CVE-2026-96951, a high-severity Windows Shell security feature bypass vulnerability that is already being exploited in real-world attacks. The flaw carries a CVSS score of 8.8 ...

CVE-2026-48095 in 7-Zip has raised fresh concerns around malicious archive handling and user-driven exploitation. According to GitHub Security Lab, the flaw is a heap buffer write overflow in 7-Zip’s ...

GitLab has released emergency security updates addressing CVE-2026-97229, a maximum-severity remote code execution vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE).

Siemens has confirmed active exploitation of a high-severity DLL side-loading vulnerability in Siemens Software Center, a desktop application used to download, install, activate, and update Siemens ...

Every day, threat intelligence teams read reports describing new attacker campaigns, and every day detection engineers face the same question: how do we turn this into detection content before the ...

Threat actors are exploiting a critical authentication bypass flaw in Palo Alto Networks GlobalProtect to obtain initial access. After entering the environment, the attackers deploy Qilin ransomware, ...

SonicWall has patched two actively exploited zero-days affecting SMA 1000 Series secure remote access appliances. The issues are CVE-2026-15409, a critical unauthenticated SSRF flaw in the Workplace ...