BlueMoon Exploit Kit Chains Three Vulnerabilities, Shared Across Four Espionage Groups Within Days
A newly discovered exploit kit targeting Chromium browsers and Windows is being rapidly distributed among…
Tag: cve
Microsoft’s September Patch Tuesday Tops 974 Vulnerabilities, Shattering Its Own Record
AI-assisted vulnerability discovery is accelerating Microsoft's patch volumes to levels that are straining enterprise patch…
Hard-coded Bootloader Credential Found in CareCam Pro IP Cameras
A CISA advisory flags a physical-access vulnerability in ANJIA AJL33PC0801 firmware that could allow complete…
Adobe Patches Critical Magento Zero-Day Exploited Before Fix Was Available
A maximum-severity flaw in Adobe Commerce and Magento Open Source was actively exploited in the…
SonicWall SMA 1000 Hit by Another Pair of Actively Exploited Zero-Days
Two newly disclosed vulnerabilities in SonicWall SMA 1000 appliances can be chained for unauthenticated remote…
CISA Adds Seven Actively Exploited Vulnerabilities to KEV Catalog
Seven new entries spanning SQL injection, command injection, authentication failures and request smuggling signal a…
SonicWall SMA1000 Zero-Days Chained in Active Attacks Against Enterprise Gateways
Two newly disclosed vulnerabilities in SonicWall's SMA1000 appliances are being exploited in the wild, with…
CVE-2026-82329: Active Exploitation of Critical JFrog Artifactory Authentication Bypass
Attackers began minting admin tokens on internet-exposed Artifactory instances within days of a 9.8-rated patch…
Rockwell Automation FactoryTalk Activation Manager Privilege Escalation Patched
A local vulnerability in FactoryTalk Activation Manager versions 5.02 and below allows an authenticated attacker…
PaperCut NG/MF Unsafe Reflection Vulnerability Added to CISA’s Known Exploited Vulnerabilities Catalogue
CVE-2026-82078 allows arbitrary Java bytecode execution under the PaperCut server process and can be chained…