New China-Aligned Threat Actor UTA0565 Joins Campaign Exploiting Chrome and Windows Zero-Days
Volexity identifies a previously undocumented group using a shared exploit kit and novel malware to…
Category: Vulnerabilities
Linux Kernel KVM Flaw on ARM64 Exposes Host Memory to Guest Virtual Machines
A use-after-free vulnerability in ARM64 KVM code allows a guest VM to read and write…
AI Bug-Finding Hype Meets Reality: Less Than 0.5% of Anthropic-Linked CVEs Exploited in the Wild
Data tracking vulnerabilities found through Anthropic's Project Glasswing suggests AI-discovered bugs are not translating into…
CISA Adds Actively Exploited Linux Kernel Vulnerability to Known Exploited Catalog
CVE-2025-39682, a Linux kernel flaw involving improper handling of exceptional conditions, is now confirmed as…
Cisco Identity Services Engine Zero-Day Allows Full Device Takeover, Actively Exploited
A maximum-severity authentication bypass in Cisco ISE gives attackers root access and control over network…
Cisco ISE Authentication Bypass Scores Perfect 10 Under Active Exploitation
A maximum-severity flaw in Cisco Identity Services Engine is being actively exploited, giving unauthenticated remote…
Schneider Electric SCADAPack x70 Credential Vulnerability Affects All Versions Across Critical Infrastructure
A medium-severity flaw in Schneider Electric's SCADAPack remote terminal units exposes authentication credentials and RTU…
Cisco Secure Email Gateway SQL Injection Flaw Added to CISA’s Known Exploited Vulnerabilities Catalogue
A critical unauthenticated SQL injection vulnerability in Cisco AsyncOS allows remote root-level command execution on…
CISA Adds Five Actively Exploited Flaws in Artifactory, ScreenConnect, and RouterOS to KEV Catalog
Three widely deployed enterprise and network products are under active exploitation, prompting a formal CISA…
GitLab Path Traversal Vulnerability Added to CISA Known Exploited Vulnerabilities Catalogue
An unauthenticated file-read flaw in GitLab's repository commits API has drawn a mandatory remediation deadline…