Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11
Swati KhandelwalAug 11, 2026Vulnerability / Enterprise Security Windows Plug and Play can be abused to fetch signed vendor software for...
2026Vulnerability
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
Ravie LakshmananAug 08, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity...
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Ravie LakshmananAug 06, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool...
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
Ravie LakshmananAug 06, 2026Vulnerability / Enterprise Security A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come...
Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup
Swati KhandelwalAug 05, 2026Vulnerability / DevOps An unauthenticated attacker can read any file the service account can access on Gitea,...
CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited
Ravie LakshmananAug 05, 2026Vulnerability / Patch Management The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added...
New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root
Swati KhandelwalAug 04, 2026Vulnerability / Database Security cPanel has patched a flaw that let an authenticated hosting customer execute SQL...
CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises
Ravie LakshmananAug 04, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity...
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
Ravie LakshmananAug 03, 2026Vulnerability / Cybercrime The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently...
N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete
Swati KhandelwalAug 03, 2026Vulnerability / Endpoint Security N-able said attackers exploited an authentication bypass in N-central to gain remote administrative...
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
Ravie LakshmananAug 03, 2026Vulnerability / AI Security Three high-severity security flaws have been disclosed in Hugging Face's Diffusers library that...
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Swati KhandelwalAug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking...
Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
Ravie LakshmananAug 01, 2026Vulnerability / Enterprise Security Adobe has released security updates to address a maximum-severity security flaw in Campaign...
Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined
Ravie LakshmananJul 31, 2026Vulnerability / Browser Security Google on Thursday announced that it fixed a whopping 1,072 security bugs in...
Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
Swati KhandelwalJul 30, 2026Vulnerability / Cloud Security A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape...