VULNERABILITIES 112
- Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
- Multiple Vulnerabilities in ELECOM Wireless LAN Routers and Access Points
- Confused Deputy' Flaws Persist in Google Cloud and Microsoft Azure
- Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
- MZ Automation libIEC61850 Vulnerabilities Exposed
- Oracle Hospitality Simphony Multiple Vulnerabilities Discovered
- Vulnerabilities in Tycon Systems TPDIN-Monitor-WEB2
- Scans for Hikvision Intelligent Security API
- Begun, the Patch Wars Have
- Csa Improve Router Hygiene
- Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices
- Researcher Finds 9 Vulnerabilities in ATM Security Software
- A US Cyber Agency Is Finally Using Anthropic’s Mythos
- Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices
- ST Engineering iDirect iQ-Series Terminals Vulnerabilities
- Chrome Needs Another Whopper Update to Fix 382 Security Bugs
- Why Are WordPress Sites Still Running EOL PHP?
- Vulnerabilities in OFFIS DCMTK Toolkit
- StoneFly Storage Concentrator Vulnerabilities Exposed
- Mitsubishi Electric MELSOFT Update Manager Vulnerabilities
- Delta Electronics DVP12SE PLC Vulnerabilities
- Someone Hacked Johnson & Johnson's Internal Systems to Teach It a Lesson
- Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
- Vulnerabilities in Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT
- Yarbo Android/iOS Mobile Application and Cloud Infrastructure Vulnerabilities
- Siemens KACO Blueplanet Inverters Vulnerabilities
- Google Patches Over 100 Android Security Vulnerabilities
- The AI Era Is Creating a Bug Hunting Arms Race
- Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts
- Malicious JPEG Images Could Trigger PHP Memory Safety Vulnerabilities
- The Time of Much Patching is Coming
- Pwn2Own Berlin 2026 - Day One Results
- Bug Hunter Tracks Down Three Massive MCP Flaws
- ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities
- Yarbo Responds to Robot Flaws That Could Mow Down Their Owners
- Before the Breach, There Was a Test Environment
- Wiz ZeroDay.Cloud Event Reveals 20-Year-Old PostgreSQL Vulnerabilities
- Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass
- Hackers Exploit RCE Flaws in Qinglong Task Scheduler for Cryptomining
- PHP Composer Flaws Enable Remote Command Execution via Perforce VCS
- Why Your Deprecated Endpoints Are an Attacker's Best Friend The Rise of Ghost APIs
- Treasury Secretary and Fed Chair Summon Banking Executives Over AI Security Concerns
- How Often Are Redirects Used in Phishing in 2026?
- TP-Link, Canva, HikVision Vulnerabilities Disclosed
- TP-Link, Canva, HikVision Vulnerabilities Disclosed
- PolyShell Attacks Target 56% of All Vulnerable Magento Stores
- PolyShell Attacks Target 56% of All Vulnerable Magento Stores
- QNAP Fixes Four Vulnerabilities Demonstrated at Pwn2Own Ireland 2025
- QNAP Fixes Four Vulnerabilities Demonstrated at Pwn2Own Ireland 2025
- Scans for Adminer Understanding the Threat
- CODESYS Vulnerabilities in Festo Automation Suite
- CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root
- Alert Regarding Vulnerabilities in Adobe Acrobat and Reader
- Alert Regarding Vulnerabilities in Adobe Acrobat and Reader
- Vulnerabilities in Lantronix EDS3000PS and EDS5000
- Fixing Request Smuggling Vulnerabilities in Pingora OSS Deployments
- Cisco Fixes Maximum-Severity Secure FMC Bugs Threatening Firewall Security
- Five Eyes Urgent Warning Patch Your Cisco SD-WAN to Prevent Root Takeover!
- Critical Vulnerabilities Found in NesterSoft WorkTime
- Uncovering Vulnerabilities with 'Good Enough' Emulation
- Telegram Channels Expose Rapid Weaponization of SmarterMail Flaws
- Critical Vulnerabilities in GE Vernova Enervista UR Setup
- Pulling Back the Curtain on Warlock's Next Act
- Eradicating Trivial Vulnerabilities at Scale
- Eradicating Trivial Vulnerabilities at Scale
- Multiple Vulnerabilities Found in ELECOM Wireless LAN Products
- Multiple vulnerabilities in Cybozu Garoon
- Multiple Vulnerabilities Found in Cybozu Garoon
- Old Windows quirks help punch through new admin defenses
- Foxit, Epic Games Store, MedDreams vulnerabilities
- Schneider Electric devices using CODESYS Runtime
- AVEVA Process Optimization
- The State of Trusted Open Source
- From change prevention to continuous improvement - Automating patch cycles with guardrails, rings, and proof
- WhatsApp Vulnerabilities Leaks User’s Metadata Including Device’s Operating System
- Zeroday Cloud hacking event awards $320,0000 for 11 zero days
- Atlassian Patches Critical Apache Tika Flaw
- Google fixes two Android zero days exploited in attacks, 107 flaws
- Security researchers caution app developers about risks in using Google Antigravity
- Old tech, new vulnerabilities - NTLM abuse, ongoing exploitation in 2025
- Security Affairs newsletter Round 551 by Pierluigi Paganini – INTERNATIONAL EDITION
- Siemens COMOS
- Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities
- Dangerous runC flaws could allow hackers to escape Docker containers
- HackedGPT – 7 New Vulnerabilities in GPT-4o and GPT-5 Enables 0-Click Attacks
- Critical flaws in Fuji Electric, Delta Electronics, Survision, Radiometrics, IDIS systems raise security concerns for industrial sector
- Exploiting Microsoft Teams Impersonation and Spoofing Vulnerabilities Exposed
- OpenAI’s New Aardvark GPT-5 Agent that Detects and Fixes Vulnerabilities Automatically
- TP-Link warns of critical command injection flaw in Omada gateways
- Senate Investigates Cisco Over Zero-Day Firewall Vulnerabilities
- F5 releases BIG-IP patches for stolen security vulnerabilities
- Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors
- CISA issues Emergency Directive requiring federal agencies to mitigate critical Cisco ASA zero-day vulnerabilities
- Flaws in Software Used by Hundreds of Cities and Towns Exposed Sensitive Data
- Google's August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild
- ReVault! When your SoC turns against you…
- Hackers Regularly Exploit Vulnerabilities Before Public Disclosure, Study Finds
- Dahua Camera flaws allow remote hacking. Update firmware now
- Struts Devmode in 2025? Critical Pre-Auth Vulnerabilities in Adobe Experience Manager Forms
- ToolShell, SharePoint, and the Death of the Patch Window
- ToolShell An all-you-can-eat buffet for threat actors
- Critical Vulnerabilities Found in Tridium Niagara Framework
- The Linuxsys Cryptominer
- Asus and Adobe vulnerabilities
- AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs
- Decrement by one to rule them all AsIO3.sys driver exploitation
- Trix Shots Remote Code Execution on Aviatrix Controller
- Researcher Finds Five Zero-Days and 20+ Misconfigurations in Salesforce Cloud
- PayU Plugin Flaw Allows Account Takeover on 5000 WordPress Sites
- Multiple CVEs in Infoblox NetMRI RCE, Auth Bypass, SQLi, and File Read Vulnerabilities
- New Linux Vulnerabilities Expose Password Hashes via Core Dumps
- CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root