Microsoft Urges Windows 11 Users to Install Updates Within Three Days
Microsoft warns attackers are increasingly using AI to accelerate exploitation of newly disclosed vulnerabilities, shrinking the time organizations have to...
exploitation
Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
Ravie LakshmananJul 15, 2026Vulnerability / Enterprise Security SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile...
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Ravie LakshmananJun 08, 2026Vulnerability / Network Security Check Point has warned of active exploitation of a critical vulnerability impacting Remote...
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are being discovered, reproduced, and...
CVE-2026-35616: Fortinet FortiClientEMS improper access control vulnerability exploited in the wild
Exploitation has been observed for CVE-2026-35616, a critical improper access control zero-day vulnerability affecting Fortinet FortiClientEMS devices. Key takeaways:...
Coruna exploit reveals evolution of Triangulation iOS exploitation framework
Coruna exploit reveals evolution of Triangulation iOS exploitation framework Pierluigi Paganini March 26, 2026 Kaspersky found Coruna iOS exploits reuse...
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure
A critical security flaw impacting Langflow has come under active exploitation within 20 hours of public disclosure, highlighting the speed...
Cisco flags ongoing exploitation of two recently patched Catalyst SD-WAN flaws
Cisco flags ongoing exploitation of two recently patched Catalyst SD-WAN flaws Pierluigi Paganini March 06, 2026 Cisco warns that two...
CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances
CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances Pierluigi Paganini March 01, 2026 About 900 Sangoma FreePBX systems were infected with...
CVE-2026-20127: Cisco Catalyst SD-WAN Controller/Manager Zero-Day Authentication Bypass Vulnerability Exploited in the Wild
Exploitation of a maximum severity authentication bypass zero-day vulnerability affecting Cisco Catalyst SD-WAN Controller and Manager has been reported....
83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting Infrastructure
Ravie LakshmananFeb 12, 2026Vulnerability / Network Security A significant chunk of the exploitation attempts targeting a newly disclosed security flaw...
PDFSIDER Malware – Exploitation of DLL Side-Loading for AV and EDR Evasion
PDFSIDER Malware – Exploitation of DLL Side-Loading for AV and EDR Evasion Pierluigi Paganini January 20, 2026 Threat actors use...
