Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
Swati KhandelwalJul 30, 2026Vulnerability / AI Security Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures...
2026Vulnerability
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
Ravie LakshmananJul 30, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly...
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Broadcom has released security updates to address multiple security flaws impacting VMware ESX,...
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Cybersecurity researchers have shared additional technical details about a recently patched critical security...
New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands
Swati KhandelwalJul 29, 2026Vulnerability / DevOps Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A...
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
Swati KhandelwalJul 28, 2026Vulnerability / Artificial Intelligence JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while...
Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In
Ravie LakshmananJul 28, 2026Vulnerability / Enterprise Security JetBrains is urging customers of on-premise versions of TeamCity to update to the...
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
Swati KhandelwalJul 28, 2026Vulnerability / Linux STAR Labs has published a Linux kernel exploit that turns an ordinary local user...
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
Ravie LakshmananJul 28, 2026Vulnerability / Threat Intelligence A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has...
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Swati KhandelwalJul 27, 2026Vulnerability / Website Security Public exploit details released on July 27 show how an unauthenticated request can...
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
Swati KhandelwalJul 27, 2026Vulnerability / Enterprise Security n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow...
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in...
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security researchers at depthfirst published working exploit code on July 24 for a GitLab...
Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
Ravie LakshmananJul 25, 2026Vulnerability / Ransomware Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest)...
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Swati KhandelwalJul 24, 2026Vulnerability / Enterprise Security Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that...