CISA Flags Authentication Bypass and XSS Flaws in Digi International Serial Device Servers
Two vulnerabilities in legacy Digi International port server products allow unauthenticated access to restricted resources…
Category: Vulnerabilities
China-Aligned Threat Group Exploits Roundcube Vulnerabilities to Target University Research Networks
A chained exploit requiring only an opened email is giving attackers persistent access to physics…
Sysdig Documents First Known End-to-End Agentic Ransomware Attack Driven by an LLM
A threat actor used an AI agent to autonomously exploit, pivot, encrypt, and extort a…
Oracle E-Business Suite Vulnerability Exploited Before Public Proof-of-Concept Emerged
Targeted exploitation of a critical EBS flaw within six weeks of patching signals a capable…
An AI Model Found the Bypass a Researcher Couldn’t: Lessons From the Front Gate Tickets Breach
A bug bounty researcher used Anthropic’s Claude Opus 4.7 to defeat a web application firewall…
Citrix patches six NetScaler vulnerabilities, including a memory disclosure flaw linked to CitrixBleed’s root cause
A new out-of-bounds memory read in NetScaler's SAML handling reinforces a persistent pattern of fragile…
SimpleHelp Authentication Bypass Lets Attackers Forge Technician Sessions via Unsigned Tokens
A vulnerability in SimpleHelp's OIDC authentication flow allows unauthenticated remote attackers to submit forged identity…
Critical libssh2 Flaw Lets Rogue SSH Servers Corrupt Client Memory
A public proof-of-concept exploit now exists for CVE-2026-55200, a CVSS 9.2 vulnerability in libssh2 that…
Check Point VPN Zero-Day: Six Weeks of Exploitation Before the Patch Directive Arrived
CVE-2026-50751 illustrates why perimeter patching alone cannot protect organisations that were already breached before a…
Two Active Cisco Exploits Target Communications and SD-WAN Infrastructure
A patched SSRF bug in Unified Communications Manager is now being weaponised in the wild,…