SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
A critical flaw in SimpleHelp, remote-access software used by IT teams and managed service providers, has been exploited to deliver...
flaw
Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
Ravie LakshmananJun 30, 2026Vulnerability / Enterprise Software A critical security flaw impacting Oracle E-Business Suite has come under active exploitation...
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
Swati KhandelwalJun 29, 2026Vulnerability / Open Source A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2...
New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries
Swati KhandelwalJun 26, 2026Linux / Vulnerability A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user...
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
Swati KhandelwalJun 26, 2026AI Security / Vulnerability A high-severity flaw in Amazon Q Developer let a malicious repository run commands...
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Ravie LakshmananJun 20, 2026Vulnerability / Web Security Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a...
Oracle Warns PeopleSoft Customers After Critical Zero-Day Exploited
A critical Oracle PeopleSoft flaw is already being exploited, putting more than 100 organizations on alert. Oracle issued an emergency...
CVE-2026-23111: Linux nf_tables Flaw Enables Root Exploits
CVE-2026-23111: Linux nf_tables Flaw Enables Root Exploits Pierluigi Paganini June 09, 2026 A Linux kernel nf_tables bug lets local users...
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access
Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access Pierluigi Paganini June 08, 2026 Hackers exploit CVE-2026-3300 in Everest...
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts
Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts Pierluigi Paganini June 08, 2026 A flaw in Meta’s AI-powered Instagram...
U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 06, 2026 U.S. Cybersecurity and...
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active...
Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories
Swati KhandelwalJun 04, 2026Vulnerability / AI Security A security researcher found a flaw in Anthropic's Claude Code GitHub Action that...
Google Patches Actively Exploited Android Flaw Affecting Millions of Devices
Google Patches Actively Exploited Android Flaw Affecting Millions of Devices Pierluigi Paganini June 03, 2026 Google fixed 124 Android flaws,...
U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 02, 2026 U.S. Cybersecurity and...
