2165 items
Unread (2155) All Dismissed
HIGH
CVE-2026-9562 (CVSS 7.3) — A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244...
NVD CVE-2026-9562 11d ago
MEDIUM
CVE-2026-8852 (CVSS 6.2) — IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi ...
NVD CVE-2026-8852 11d ago
HIGH
CVE-2026-8850 (CVSS 7.5) — IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_uplo...
NVD CVE-2026-8850 11d ago
CRITICAL
CVE-2026-48904 (CVSS 9.8) — An improper access check allows privelege escalation through the com_users group editing webservice ...
NVD CVE-2026-48904 11d ago
CRITICAL
CVE-2026-48899 (CVSS 9.8) — An improper access check allows privilege escalation through the com_users batch task.
NVD CVE-2026-48899 11d ago
CRITICAL
CVE-2026-48898 (CVSS 9.8) — An improper access check allows privilege escalation through the com_users batch task.
NVD CVE-2026-48898 11d ago
HIGH
CVE-2026-48897 (CVSS 7.5) — Insufficient state checks lead to a vector that allows to bypass 2FA checks.
NVD CVE-2026-48897 11d ago
HIGH
CVE-2026-48896 (CVSS 7.5) — Insufficient state checks lead to a vector that allows to bypass 2FA checks.
NVD CVE-2026-48896 11d ago
HIGH
CVE-2026-48864 (CVSS 7.8) — A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-c...
NVD CVE-2026-48864 11d ago
HIGH
CVE-2026-48697 (CVSS 7.4) — FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connec...
NVD CVE-2026-48697 11d ago
CRITICAL
CVE-2026-48691 (CVSS 9.8) — FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH attribute...
NVD CVE-2026-48691 11d ago
HIGH
CVE-2026-48690 (CVSS 7.1) — FastNetMon Community Edition through 1.2.9 contains an integer overflow vulnerability in the packet ...
NVD CVE-2026-48690 11d ago
MEDIUM
CVE-2026-44723 (CVSS 5) — Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ...
NVD CVE-2026-44723 11d ago
HIGH
CVE-2026-40384 (CVSS 7.5) — An improper validation of the search parameter of the com_media files API endpoint leads to a path t...
NVD CVE-2026-40384 11d ago
CRITICAL
CVE-2026-40383 (CVSS 9.8) — An improper validation of user-supplied input leads to a local file inclusion vulnerability.
NVD CVE-2026-40383 11d ago
CRITICAL
CVE-2026-35223 (CVSS 9.8) — An improper access check allows unauthorized access to com_config webservice endpoints.
NVD CVE-2026-35223 11d ago
CRITICAL
CVE-2026-35222 (CVSS 9.8) — Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.
NVD CVE-2026-35222 11d ago
CRITICAL
CVE-2026-35221 (CVSS 9.8) — Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_fi...
NVD CVE-2026-35221 11d ago
HIGH
CVE-2026-24212 (CVSS 7.5) — NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitte...
NVD CVE-2026-24212 11d ago
MEDIUM
CVE-2025-36221 (CVSS 5.3) — IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data Sys...
NVD CVE-2025-36221 11d ago
MEDIUM
CVE-2025-36220 (CVSS 4.3) — IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data Sys...
NVD CVE-2025-36220 11d ago
MEDIUM
CVE-2025-36126 (CVSS 6.4) — IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is...
NVD CVE-2025-36126 11d ago
HIGH
CVE-2026-48692 (CVSS 8.1) — FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentic...
NVD CVE-2026-48692 11d ago
HIGH
CVE-2026-48688 (CVSS 7.5) — FastNetMon Community Edition through 1.2.9 contains multiple out-of-bounds reads in the BGP MP_REACH...
NVD CVE-2026-48688 11d ago
CRITICAL
CVE-2026-48687 (CVSS 9.8) — FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Jun...
NVD CVE-2026-48687 11d ago
CRITICAL
CVE-2026-48686 (CVSS 9.8) — FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (N...
NVD CVE-2026-48686 11d ago
INFO
China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa
The Hacker News supply-chainbreachesmalware +10 2d ago
INFO
Middle East Cyber Battle Field Broadens — Especially in UAE
rss:darkreading 31d ago
INFO
Cyber Resilience is the New Business Continuity Plan
SecurityWeek 18d ago
INFO
Windows Zero-Day Barrage Continues After Patch Tuesday
rss:darkreading 17d ago
INFO
Identity Alone Isn't Enough: Why Device Security Has to Share the Load
BleepingComputer 17d ago
INFO
Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects
SecurityWeek 12d ago
INFO
Iranian APT Targets Aviation, Software Companies With Updated Tools
SecurityWeek 11d ago
INFO
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
The Hacker News 11d ago
INFO
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
The Hacker News 9d ago
INFO
Global Stock Exchange Hit by Monthslong Email Campaign
rss:darkreading 3d ago
INFO
What 345 Days of Untested Exposure Looks Like at a Bank
BleepingComputer 3d ago
HIGH
CVE-2026-9552 (CVSS 7.3) — A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerabili...
NVD CVE-2026-9552 11d ago
HIGH
CVE-2026-9551 (CVSS 7.3) — A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the func...
NVD CVE-2026-9551 11d ago
HIGH
CVE-2026-9550 (CVSS 7.3) — A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance C...
NVD CVE-2026-9550 11d ago
HIGH
CVE-2026-4480 (CVSS 8.5) — A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description...
NVD CVE-2026-4480 11d ago
HIGH
CVE-2026-46368 (CVSS 8.8) — luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-pro...
NVD CVE-2026-46368 11d ago
CRITICAL
CVE-2026-45247: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability (Mirasvit Mirasvit Full Page Cache Warmer)
CISA KEV CVE-2026-45247actively-exploited +2 3d ago
CRITICAL
CVE-2026-45247 (CVSS 9.8) — Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection...
NVD 11d ago
INFO
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
The Hacker News 2d ago
HIGH
CVE-2026-42785 (CVSS 7.2) — OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrator...
NVD CVE-2026-42785 11d ago
HIGH
CVE-2026-42425 (CVSS 7.2) — OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated adminis...
NVD CVE-2026-42425 11d ago
HIGH
CVE-2026-40034 (CVSS 7.8) — gix-submodule before 0.82.0 incorrectly validates the update field in .gitmodules, allowing attacker...
NVD CVE-2026-40034 11d ago
HIGH
CVE-2026-40033 (CVSS 8.8) — FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allow...
NVD CVE-2026-40033 11d ago
INFO
Identifying People Using Wi-Fi Routers
rss:schneier analysispolicy 11d ago
HIGH
CVE-2026-9544 (CVSS 7.3) — A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System...
NVD CVE-2026-9544 11d ago
CRITICAL
CVE-2026-9543 (CVSS 9.8) — A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setP...
NVD CVE-2026-9543 11d ago
CRITICAL
CVE-2026-7374 (CVSS 9.9) — A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated Op...
NVD CVE-2026-7374 11d ago
INFO
Lithuania investigates theft of 600,000 state registry records by foreign actor
The Record breachesransomwarenation-state 11d ago
INFO
How Varonis Atlas integrates Claude Compliance API for AI governance
BleepingComputer breachesransomwaresupply-chain 11d ago
INFO
AppOmni’s Marlin AI Brings Autonomous Investigation to SaaS Security
SecurityWeek breachesransomwaresupply-chain 11d ago
HIGH
Microsoft shares mitigation for YellowKey Windows zero-day
BleepingComputer breachesransomwaresupply-chain +48 17d ago
INFO
Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation
The Hacker News 24d ago
INFO
Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday
The Hacker News 24d ago
HIGH
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
The Hacker News 23d ago
INFO
Zero-Day Exploit Against Windows BitLocker
rss:schneier 19d ago
INFO
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer
The Hacker News 18d ago
INFO
The New Phishing Click: How OAuth Consent Bypasses MFA
The Hacker News 18d ago
INFO
Legacy Windows Tool MSHTA Fuels Surge in Silent Malware Attacks
SecurityWeek 18d ago
HIGH
Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’
SecurityWeek 18d ago
INFO
Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOS
rss:darkreading 18d ago
HIGH
Cybercrime service disrupted for abusing Microsoft platform to sign malware
BleepingComputer 17d ago
INFO
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API
The Hacker News 17d ago
INFO
Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks
The Hacker News 17d ago
INFO
Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass
SecurityWeek 17d ago
INFO
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development
The Hacker News 17d ago
INFO
Microsoft warns of new Defender zero-days exploited in attacks
BleepingComputer 16d ago
INFO
Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days
SecurityWeek 16d ago
INFO
China's Webworm Uses Discord, Microsoft Graphs to Hack EU Govts.
rss:darkreading 15d ago
INFO
FBI warns of Kali365 phishing-as-a-service after April Microsoft 365 attacks
The Record 15d ago
INFO
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts
BleepingComputer 12d ago
INFO
Microsoft: Domain Controller lookup may fail on Windows Server 2016
BleepingComputer 11d ago
INFO
Anthropic Expands Claude’s Enterprise Security Governance With 28 New Integrations
SecurityWeek 11d ago
INFO
Microsoft Defender can now automatically isolate hacked endpoints
BleepingComputer 11d ago
INFO
Microsoft Issues Out-of-Band SharePoint Patch
rss:darkreading 11d ago
INFO
AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
The Hacker News 10d ago
INFO
Windows 11 KB5089573 update released with performance improvements
BleepingComputer 10d ago
INFO
Microsoft fixes KB5089549 Windows security update install issues
BleepingComputer 5d ago
INFO
Microsoft confirms outage affecting MFA, My Sign-Ins platform
BleepingComputer 5d ago
INFO
Microsoft fixes outage affecting MFA setup, MySignIn service
BleepingComputer 5d ago
INFO
Microsoft says it will not pursue security researchers after zero-day backlash
The Record 5d ago
INFO
Microsoft investigates Office Apps, Teams file access issues
BleepingComputer 5d ago
INFO
Microsoft's Zero-Day Legal Threats Spark Backlash
rss:darkreading 5d ago
INFO
Microsoft Threatening Security Researcher
rss:schneier 4d ago
INFO
Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk
SecurityWeek 4d ago
INFO
Microsoft Exchange Online outage causes email delays, failures
BleepingComputer 4d ago
INFO
FBI-Flagged Phishing Kit Kali365 Expands Its Reach
rss:darkreading 3d ago
INFO
Microsoft's Coreutils project brings Linux commands to Windows
BleepingComputer 3d ago
INFO
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
The Hacker News 3d ago
INFO
Microsoft Tries to Calm Legal Threat Fears After Zero-Day Disclosure Backlash
SecurityWeek 3d ago
INFO
One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens
The Hacker News 3d ago
INFO
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
The Hacker News 3d ago
INFO
Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
rss:darkreading 3d ago
INFO
VS Code Vulnerability Allows One-Click GitHub Token Theft
SecurityWeek 2d ago
INFO
Researcher publishes GitHub token-stealing exploit, blames Microsoft’s disclosure process
The Record 2d ago
INFO
Microsoft blames unexpected Windows driver updates on caching issue
BleepingComputer 2d ago
INFO
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network
The Hacker News 1d ago
INFO
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework
The Hacker News 1d ago
INFO
Chinese APT deploys new malware to keep access to hacked networks
BleepingComputer 1d ago
INFO
Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack
The Hacker News 13h ago
INFO
Webinar: Why network incidents take too long to resolve
BleepingComputer breachesransomwaresupply-chain +1 9d ago
INFO
Webinar: Too many tools are slowing network incident response
BleepingComputer 11d ago
INFO
Remembering Tim Wilson, Whose Legacy Lives on at Dark Reading
rss:darkreading breachesmalwarethreat-actors 11d ago
HIGH
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
The Hacker News supply-chainbreachesmalware +81 18d ago
INFO
ABB AC500 V3 Stack Buffer Overflow in Cryptographic Message Syntax
rss:cisa-advisories 25d ago
INFO
Fuji Electric Tellus
rss:cisa-advisories 25d ago
INFO
ABB AC500 V3 Multiple Vulnerabilities
rss:cisa-advisories 25d ago
INFO
Subnet Solutions PowerSYSTEM Center
rss:cisa-advisories 25d ago
INFO
ABB Automation Builder Gateway for Windows
rss:cisa-advisories 25d ago
INFO
ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities
rss:cisa-advisories 25d ago
INFO
Siemens Siemens ROS#
rss:cisa-advisories 23d ago
INFO
Siemens gWAP
rss:cisa-advisories 23d ago
INFO
Siemens SIMATIC
rss:cisa-advisories 23d ago
INFO
Siemens Ruggedcom Rox
rss:cisa-advisories 23d ago
INFO
Siemens Ruggedcom Rox
rss:cisa-advisories 23d ago
INFO
Siemens Simcenter Femap
rss:cisa-advisories 23d ago
INFO
Universal Robots Polyscope 5
rss:cisa-advisories 23d ago
INFO
Siemens Ruggedcom Rox
rss:cisa-advisories 23d ago
INFO
Siemens Teamcenter
rss:cisa-advisories 23d ago
INFO
Siemens Solid Edge
rss:cisa-advisories 23d ago
INFO
Siemens SENTRON 7KT PAC1261 Data Manager
rss:cisa-advisories 23d ago
INFO
Siemens Opcenter RDnL
rss:cisa-advisories 23d ago
INFO
Siemens Ruggedcom Rox
rss:cisa-advisories 23d ago
INFO
Siemens Industrial Devices
rss:cisa-advisories 23d ago
INFO
Siemens SIMATIC S7 PLC Web Server
rss:cisa-advisories 23d ago
INFO
Siemens SIPROTEC 5
rss:cisa-advisories 23d ago
INFO
Siemens SIMATIC
rss:cisa-advisories 23d ago
INFO
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
The Hacker News 20d ago
INFO
Kieback & Peter DDC Building Controllers
rss:cisa-advisories 18d ago
INFO
Siemens RUGGEDCOM APE1808 Devices
rss:cisa-advisories 18d ago
INFO
ABB CoreSense HM and CoreSense M10
rss:cisa-advisories 18d ago
INFO
ScadaBR
rss:cisa-advisories 18d ago
INFO
ZKTeco CCTV Cameras
rss:cisa-advisories 18d ago
INFO
CISA Exposes Secrets, Credentials in 'Private' Repo
rss:darkreading 18d ago
INFO
GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories
The Hacker News 17d ago
INFO
GitHub investigates internal repositories breach claimed by TeamPCP
BleepingComputer 17d ago
INFO
GitHub confirms breach of 3,800 repos via malicious VSCode extension
BleepingComputer 17d ago
INFO
Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01)
rss:cisa-advisories 17d ago
INFO
Senator presses CISA for answers about alleged GitHub repository leak
The Record 17d ago
INFO
GitHub confirms being hacked by TeamPCP, says customer data unaffected
The Record 17d ago
INFO
Grafana breach caused by missed token rotation after TanStack attack
BleepingComputer 17d ago
INFO
GitHub Confirms Breach, 4K Internal Repos Stolen
rss:darkreading 16d ago
INFO
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
The Hacker News 16d ago
INFO
GitHub links repo breach to TanStack npm supply-chain attack
BleepingComputer 16d ago
INFO
ABB Terra AC Wallbox
rss:cisa-advisories 16d ago
INFO
ABB B&R Automation Studio
rss:cisa-advisories 16d ago
INFO
ABB B&R Automation Runtime
rss:cisa-advisories 16d ago
INFO
ABB B&R PCs
rss:cisa-advisories 16d ago
INFO
Grafana Says Codebase and Other Data Stolen via TanStack Supply Chain Attack
SecurityWeek 15d ago
INFO
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
The Hacker News 15d ago
INFO
CISA Security Leak
rss:schneier 15d ago
INFO
Lawmakers Demand Answers as CISA Tries to Contain Data Leak
Krebs 15d ago
INFO
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
The Hacker News 14d ago
INFO
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
The Hacker News 14d ago
INFO
Laravel Lang packages hijacked to deploy credential-stealing malware
BleepingComputer 13d ago
INFO
Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack
SecurityWeek 12d ago
INFO
ABB Terra AC
rss:cisa-advisories 11d ago
INFO
ABB LVS MConfig
rss:cisa-advisories 11d ago
INFO
ABB Ability Camera Connect
rss:cisa-advisories 11d ago
INFO
Eppendorf BioFlo 320
rss:cisa-advisories 11d ago
INFO
ABB AbilityTM Zenon Remote Transport Vulnerability
rss:cisa-advisories 11d ago
INFO
ABB AC500 V2
rss:cisa-advisories 11d ago
INFO
ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)
rss:cisa-advisories 11d ago
INFO
Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos
rss:darkreading 11d ago
INFO
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
The Hacker News 10d ago
INFO
ABB EIBPORT
rss:cisa-advisories 9d ago
INFO
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
rss:cisa-advisories 9d ago
INFO
ABB Busch-Welcome 2 Wire Door Opener Actuator
rss:cisa-advisories 9d ago
INFO
Fourth Frontier Frontier X Mobile Application, Frontier X2
rss:cisa-advisories 9d ago
INFO
CP Plus 8 Ch. Network Video Recorder
rss:cisa-advisories 9d ago
INFO
XCharge C6
rss:cisa-advisories 9d ago
INFO
KMW CCTV Security Cameras
rss:cisa-advisories 9d ago
INFO
MacGregor Voyage Data Recorder (VDR) G4e
rss:cisa-advisories 9d ago
INFO
Supply Chain Compromises Impact Nx Console and GitHub Repositories
rss:cisa-advisories 9d ago
INFO
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
The Hacker News 9d ago
INFO
Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more
The Record 8d ago
INFO
OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
The Hacker News 5d ago
INFO
Red Hat removes tainted packages after software pipeline compromise
The Record 4d ago
INFO
VS Code zero-day lets hackers steal GitHub tokens in one click
BleepingComputer 3d ago
INFO
NAVTOR NavBox
rss:cisa-advisories 2d ago
INFO
Hitachi Energy MACH HiDraw
rss:cisa-advisories 2d ago
INFO
Hitachi Energy ITT600 Explorer
rss:cisa-advisories 2d ago
INFO
B&R PPT30 Operating System
rss:cisa-advisories 2d ago
INFO
Hitachi Energy RTU500
rss:cisa-advisories 2d ago
INFO
Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories
The Hacker News 2d ago
TL;DR
A new China-linked cybercrime group known as TA4922 has expanded its targeting focus to target European organizations in the U.K., Germany, Italy, and South Africa. These efforts have been complemented by a "rapid operational tempo" and a continually evolving malware arsenal comprising known familie
supply-chainbreachesmalwarenation-state
Read full story ↗