SCKit Malware Exploits ScreenConnect Vulnerability for MSP Attacks
New worm-like malware SCKit targets MSPs, exploiting CVE-2026-84869 to spread from infected devices to MSP technicians' computers and compromise additional networks.
Search
Find a quick tip
Results for "Vulnerability".
Apache HTTP Server Patches Critical HTTP/2 Vulnerability
Apache HTTP Server has patched a critical vulnerability in the HTTP/2 module that could allow attackers to execute arbitrary code with server privileges, affecting versions 2.4.55 through 2.4.70 and standalone mod_h2 versions 2.0.8 through 2.0.42.
GitLab Vulnerability Exploited: A Comprehensive Guide
The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that attackers are now exploiting a critical GitLab vulnerability, CVE-2026-97229, which was patched in early April.
Apple Addresses CoreGraphics Zero-Day Vulnerability Across Older Devices
Apple backports security patches to older iPhones and iPads for a CoreGraphics flaw exploited in targeted attacks.
Critical Brotli Vulnerability: A Comprehensive Guide to Node.js and Beyond
Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches, affecting Node.js and multiple Python HTTP clients. This guide provides a detailed look at the vulnerability and recommended mitigation strategies.
PHP RCE Vulnerability Mitigation Guide: Practical Steps and Recommendations
PHP security team shares mitigation measures for a new RCE vulnerability affecting systems with unusual configurations. Learn how to apply these measures and avoid potential exploitation.
GitLab Security Vulnerability Guide: Protecting Your Infrastructure Against RCE Flaws
GitLab has released patches for a critical RCE vulnerability, CVE-2026-110264, and recommends immediate action to safeguard your servers. Here's how to protect your GitLab environment and avoid similar threats.
Protect Your Magento Store from the BlockStrap Vulnerability
Researchers have warned of a critical vulnerability in Magento and Adobe Commerce that could allow attackers to execute arbitrary PHP code, highlighting the importance of timely security updates and comprehensive defenses.
GitLab warns of max severity code execution vulnerability
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances.
GitLab warns of critical RCE vulnerability in AI Gateway service
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances.
Kiteworks patches max severity code injection vulnerability
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution.
Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening
AI labs are toying with an industry-wide pact to slow development.
SAP warns of maximum severity 'OVERPASS' kernel vulnerability
SAP has addressed 20 vulnerabilities across multiple products in its September 2026 security updates, including a maximum-severity memory corruption flaw in the SAP Kernel code.
AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up?
AI is accelerating vulnerability discovery, putting pressure on systems built to enrich, prioritize, and remediate flaws at a slower pace.
Meta Addresses Smart Glasses Recording LED Vulnerability
Meta fixes a loophole allowing smart glasses to be surreptitiously recorded, addressing user concerns about privacy.
CISA warns of hackers exploiting critical MLflow vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical vulnerability in the MLflow open-source AI engineering platform.
Microsoft patches LegacyHive Windows zero-day vulnerability
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday.
Check Point SmartConsole Zero-Day Vulnerability: A Comprehensive Guide
Israeli cybersecurity firm Check Point Software has addressed a zero-day flaw in its SmartConsole graphical user interface (GUI) admin panel, which allows unauthenticated attackers to obtain administrator privileges.
Zoom warns of critical account takeover vulnerability
Zoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that could be exploited by an unauthenticated party to hijack accounts.
We built a vulnerability vending machine: AI tokens in, zero-days out
Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover complex software vulnerabilities.
Microsoft patches RoguePlanet Defender zero-day vulnerability
Microsoft has released a security patch to address a Defender zero-day vulnerability known as "RoguePlanet," disclosed after the June 2026 Patch Tuesday.
Ubiquiti warns of new max severity UniFi OS vulnerability
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks.
FFmpeg Fixes PixelSmash Vulnerability in Popular Video Decoders
FFmpeg has addressed a critical PixelSmash vulnerability in widely used video decoders, mitigating potential remote code execution and denial-of-service attacks.
Max severity Ivanti Sentry vulnerability now exploited in attacks
Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways.
New Veeam vulnerability exposes backup servers to RCE attacks
Veeam has released security updates to patch a critical Backup & Replication security flaw that can be exploited to gain remote code execution (RCE) on domain-joined backup servers.
Hackers Are After the Gaps in Your Vulnerability Program: Here's Their Playbook
Threat actors are actively teaching newcomers how to find, exploit, and profit from vulnerable systems. Flare explores what a popular underground hacking tutorial reveals about modern attacker workflows.
Race Against Time: Why Faster Vulnerability Alerts Matter
Attackers are exploiting vulnerabilities faster than many organizations can identify and patch them. SecAlerts explains why faster vulnerability alerts can help reduce exposure and improve response times.
WP Maps Pro Plugin Vulnerability: Creating Admin Accounts Without Authentication
Hackers are exploiting a critical vulnerability in the WP Maps Pro plugin to create rogue administrator accounts on WordPress sites, highlighting the importance of keeping plugins updated.
CISA orders feds to patch actively exploited Drupal vulnerability
CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection vulnerability in the Drupal content management system (CMS) that it flagged as actively exploited.
N-able N-central Zero-Day Vulnerabilities Exploited Hours After PoC Release
Hackers are actively exploiting newly disclosed N-able N-central zero-day vulnerabilities, including 4EverAble2Shell, to compromise servers and deploy cryptocurrency miners.