CISA adds seven known exploited vulnerabilities to catalog
Five legacy Microsoft flaws from 2008-2010 join two current Microsoft Defender vulnerabilities on federal remediation…
Year: 2026
Trapdoor Android Ad Fraud Operation Compromised 455 Apps
HUMAN researchers uncovered a multi-stage fraud scheme targeting Android users through malicious apps and command-and-control…
Microsoft disrupts illegal code-signing operation targeting thousands of US victims
Tech giant shuts down malware signing service used by ransomware groups to bypass security controls.
Siemens RUGGEDCOM devices affected by critical Palo Alto firewall vulnerability
Industrial automation devices inherit maximum severity buffer overflow flaw from underlying PAN-OS software
Ivanti, Fortinet, SAP, VMware Patch Critical Vulnerabilities
Multiple vendors release fixes for remote code execution, SQL injection and privilege escalation flaws.
CISA warns of authentication bypass flaws in PowerSYSTEM Center
Multiple CVEs affect Subnet Solutions industrial control software used in energy and manufacturing sectors worldwide.
Weekly Security Roundup Highlights Multiple Attack Vectors
Security researchers document exchange server vulnerabilities, npm supply chain attacks, and cloud infrastructure compromise patterns.
CISA warns of privilege escalation flaw in Fuji Electric Tellus software
Industrial control software vulnerability allows users to gain system-level access through exposed kernel driver permissions.
Zero-day exploit bypasses Windows 11 BitLocker encryption protection
YellowKey exploit requires physical access but reliably defeats default BitLocker deployments on Windows 11 systems.
Windows Zero-Day Vulnerability Grants SYSTEM Privileges on Patched Systems
Security researcher releases proof-of-concept for MiniPlasma flaw affecting Windows Cloud Files Mini Filter Driver.