SharePoint Authentication Bypass Under Active Exploitation Following PoC Release
CVE-2026-55040, patched in July 2026 Patch Tuesday, is now being actively targeted after public proof-of-concept…
Tag: cve
ShieldBreak PoC Claims Patch Bypass in Microsoft Defender, Granting SYSTEM-Level Access
A researcher has published a proof-of-concept exploit targeting Microsoft Defender that reportedly sidesteps a previously…
Microsoft’s August Patch Tuesday Covers 398 Vulnerabilities, Including One Active Zero-Day
A single exploited privilege-escalation flaw in a core Windows networking driver sits at the centre…
N-able confirms customer network breaches as second mandatory hotfix lands for N-central zero-day
Attackers exploited a critical authentication bypass in N-central to pivot from the management platform into…
WordPress Login Screen XSS Vulnerability Opens Path to Server-Side Code Execution
A pre-authentication flaw in WordPress affects all versions of the platform and can be chained…
Thousands of Industrial Water Controllers Remain Exposed Online After Wave of US Utility Attacks
A Forescout scan found over 4,000 Rockwell Automation and Allen-Bradley controllers accessible on the public…
CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog
IBM Langflow, N-able N-central, and Apache Tomcat vulnerabilities are confirmed in active use by threat…
INC Ransomware Moves Aggressively on Chained SonicWall Zero-Days
One of the world's most active ransomware groups has become the dominant threat actor exploiting…
N-able N-central Authentication Bypass Added to CISA’s Known Exploited Vulnerabilities Catalogue
An incomplete patch has left N-central users exposed to authentication bypass and account takeover, with…
Thermo Fisher Patches DNA Software Flaw That Could Allow Nearly Undetectable File Tampering
A vulnerability in Applied Biosystems human identification software let attackers alter DNA data files before…