Microsoft Patch Pending for ShieldBreak Zero-Day in Defender
A publicly disclosed vulnerability in Microsoft Defender is awaiting a fix, leaving organisations to manage…
Category: Vulnerabilities
Hitachi Energy APM Edge Carries Two Linux Kernel Privilege Escalation Flaws
A pair of 'Dirty Frag' vulnerabilities in the Linux kernel allow any local unprivileged user…
SharePoint Authentication Bypass Under Active Exploitation Following PoC Release
CVE-2026-55040, patched in July 2026 Patch Tuesday, is now being actively targeted after public proof-of-concept…
ShieldBreak PoC Claims Patch Bypass in Microsoft Defender, Granting SYSTEM-Level Access
A researcher has published a proof-of-concept exploit targeting Microsoft Defender that reportedly sidesteps a previously…
Microsoft’s August Patch Tuesday Covers 398 Vulnerabilities, Including One Active Zero-Day
A single exploited privilege-escalation flaw in a core Windows networking driver sits at the centre…
N-able confirms customer network breaches as second mandatory hotfix lands for N-central zero-day
Attackers exploited a critical authentication bypass in N-central to pivot from the management platform into…
WordPress Login Screen XSS Vulnerability Opens Path to Server-Side Code Execution
A pre-authentication flaw in WordPress affects all versions of the platform and can be chained…
Thousands of Industrial Water Controllers Remain Exposed Online After Wave of US Utility Attacks
A Forescout scan found over 4,000 Rockwell Automation and Allen-Bradley controllers accessible on the public…
CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog
IBM Langflow, N-able N-central, and Apache Tomcat vulnerabilities are confirmed in active use by threat…
INC Ransomware Moves Aggressively on Chained SonicWall Zero-Days
One of the world's most active ransomware groups has become the dominant threat actor exploiting…