Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero...
critical
SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
A critical flaw in SimpleHelp, remote-access software used by IT teams and managed service providers, has been exploited to deliver...
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
Swati KhandelwalJun 30, 2026Vulnerability / API Security A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute...
Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
Ravie LakshmananJun 30, 2026Vulnerability / Enterprise Software A critical security flaw impacting Oracle E-Business Suite has come under active exploitation...
Update Chrome Now: Google Fixes 18 Security Flaws, Including Critical Bugs
Eighteen bugs, four of them critical, and one browser update stand between your computer and a bad time. Google pushed...
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
Swati KhandelwalJun 29, 2026Vulnerability / Open Source A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2...
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
Ravie LakshmananJun 18, 2026Vulnerability / Cloud Security F5 has released security updates to address two critical security flaws in NGINX...
Protecting legacy OT systems against modern cyberthreats
Critical Infrastructure Many manufacturing plants depend on OT systems that stay in service for many years. That long run can...
Oracle Warns PeopleSoft Customers After Critical Zero-Day Exploited
A critical Oracle PeopleSoft flaw is already being exploited, putting more than 100 organizations on alert. Oracle issued an emergency...
June Patch Tuesday smashes past 500-CVE mark
Critical severityCVE-2026-33828Windows Device Health Attestation (DHA) Elevation of Privilege VulnerabilityCVE-2026-42985Remote Desktop Client Remote Code Execution VulnerabilityCVE-2026-42987Windows Deployment Services (WDS) Remote...
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Ravie LakshmananJun 08, 2026Vulnerability / Network Security Check Point has warned of active exploitation of a critical vulnerability impacting Remote...
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active...
Smashing Security podcast #469: What your Oura ring won’t tell you
CISA, the US government agency whose entire job is keeping America's critical infrastructure safe from hackers, has had a contractor...
Smashing Security podcast #469: What your Oura ring won’t tell you
CISA, the US government agency whose entire job is keeping America’s critical infrastructure safe from hackers, has had a contractor...
Smashing Security podcast #469: What your Oura ring won’t tell you
CISA, the US government agency whose entire job is keeping America’s critical infrastructure safe from hackers, has had a contractor...
