EPICS Base Vulnerabilities Expose Critical Manufacturing Infrastructure to Remote Code Execution
Four newly disclosed flaws in EPICS Base versions up to 7.0.10 carry CVSS scores as…
Category: Vulnerabilities
Brotli Library Vulnerability Draws Concern but No Confirmed Exploitation
CVE-2026-111497 has a broad attack surface across cloud environments, but researchers urge organisations to assess…
PHP2Shell RCE Vulnerabilities Actively Exploited in the Wild
Two critical remote code execution flaws tracked as PHP2Shell are being exploited, prompting mitigation guidance…
CISA Flags SQL Injection Flaw in Arista VeloCloud Orchestrator as Actively Exploitable
A newly catalogued vulnerability in Arista's on-premises SD-WAN orchestrator could allow remote attackers to access…
Signal Calling Bug Could Leave Microphones and Cameras Active After Hangup
A critical flaw in Signal's RingRTC library allowed a malicious caller to flood the call…
PHP2Shell: Emergency PHP Patches Ship a Day Early After Leak, as Exploit Attempts Begin
Two critical flaws in the PHP engine let attackers with no account run code on…
Hitachi Energy RTU500 Product
What security leaders need to know about CVE-2026-17539, CVE-2026-28388, CVE-2026-6732, CVE-2026-6653, CVE-2026-6276.
Siemens Software Center DLL Sideloading Flaw Exploited in ClickFix Campaigns
A high-severity vulnerability in Siemens Software Center has been actively exploited to deploy remote access…
Patch Bypasses Are Rising Sharply as AI Accelerates Vulnerability Discovery
A new analysis finds that incomplete security fixes are being exploited at a meaningfully higher…
Chinese espionage group Armory Castle exploits BeyondTrust zero-day, patch delayed a month
A well-resourced Chinese state-linked threat actor exploited a critical BeyondTrust Remote Support vulnerability from late…