Six Vulnerabilities in Eclipse Milo OPC UA Library Expose Industrial Control Systems to Credential Theft and Denial of Service
CISA has advised organisations using Eclipse Milo versions 0.6.0 through 1.1.4 to upgrade immediately after…
Category: Vulnerabilities
Cisco Secure Email Gateway hit by second zero-day in two months, root access via malicious attachment
A critical, remotely exploitable flaw in Cisco's Secure Email Gateway is being actively exploited before…
Ivanti Connect Secure Authentication Bypass Added to CISA’s Known Exploited Vulnerabilities Catalogue
CVE-2026-104935 allows remote unauthenticated attackers to execute arbitrary commands via a spoofing flaw, with active…
SonicWall SMA 1000 SSRF Flaw Draws Exploitation Attempts Within Days of Patch Release
A critical pre-authentication vulnerability in SonicWall's SMA 1000 appliances is already attracting active exploitation attempts,…
PoeLLM Malware Uses Adversarial Poetry to Hide C2 Infrastructure, Hits 3,000+ AI Servers
A financially motivated campaign attributed to an Italian-speaking attacker has compromised enterprise AI infrastructure at…
Hitachi Energy SOI Carries High-Severity RCE Flaw in Apache ActiveMQ Component
A CVSS 8.8 code-injection vulnerability in Hitachi Energy's SOI product allows an authenticated remote attacker…
Atlassian Patches Critical Arbitrary File Access Flaw Across Eight Datacenter Products
A 9.3-rated vulnerability allows unauthenticated attackers to read specific files from affected Atlassian datacenter installations…
CISA Flags Zammad Privilege Escalation Flaw as Actively Exploited
A privilege management vulnerability in the Zammad help desk platform has been added to CISA's…
Zammad Zero-Days Used to Breach Dutch Vulnerability Disclosure Body in Apparent AI-Assisted Attack
Two chained critical flaws in the Zammad helpdesk platform gave attackers root access to DIVD…
Cisco SD-WAN Manager Authentication Bypass Under Active Exploitation
A critical zero-day in Cisco Catalyst SD-WAN Manager lets unauthenticated remote attackers operate as admin…