Check Point VPN Zero-Day Gave Attackers Month-Long Head Start Before Patch
Critical authentication bypass vulnerability exploited by ransomware groups since early May now has emergency fix.
Category: Vulnerabilities
Cisco SD-WAN Zero-Day Under Active Attack With No Patch Timeline
Authenticated attackers can gain root privileges through file upload vulnerability affecting all versions of Catalyst…
University Researchers Build Self-Propagating Worm Using Free Open-Source AI Model
Toronto academics demonstrate that publicly available language models can autonomously exploit known vulnerabilities and spread…
Oracle WebLogic Server Critical Vulnerability Added to CISA KEV Catalogue
CVE-2024-21182 allows unauthenticated network attackers to potentially access all WebLogic Server data, with remediation required…
Palo Alto GlobalProtect Authentication Bypass Under Active Attack
CVE-2024-0257 enables attackers to bypass VPN authentication using forged cookies, with exploitation confirmed across multiple…
Researcher threatens July Windows exploit release after Microsoft dispute
Security researcher claims to have additional zero-day exploits following public disagreement with Microsoft over vulnerability…
Microsoft Criticises Public Zero-Day Disclosures After GitHub Account Removal
Software giant reinforces coordinated disclosure policy following researcher's public vulnerability releases.
JINX-0164 Threat Actor Targets Cryptocurrency Firms with macOS Malware
Previously unknown threat group uses fake recruiting lures and custom malware to target digital asset…
Cisco Patches Maximum Severity Flaw in Secure Workload REST API
CVE-2026-20223 allows unauthenticated attackers to access sensitive data through insufficient API validation.
Microsoft Mitigates YellowKey BitLocker Bypass Vulnerability CVE-2026-45585
The company has released a mitigation for the publicly disclosed zero-day flaw that allows attackers…