SonicWall SMA1000 Zero-Days Chained for Full System Compromise, Ransomware Suspected
Two actively exploited vulnerabilities in SonicWall SMA1000 appliances have been confirmed by the vendor, with…
Tag: exploitation
Microsoft’s July Patch Tuesday Reaches 570 Fixes as AI Reshapes the Vulnerability Landscape
A record-breaking patch release — nearly triple last month's count — signals a structural shift…
Linux Kernel Privilege Escalation Flaw Affects ABB Ability Edgenius Edge Computing Platform
A publicly disclosed local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem affects ABB…
CISA Flags Two Perfect-Score Joomla Extension Bugs Under Active Exploitation
Critical file-upload vulnerabilities in iCagenda and Balbooa Forms are being actively exploited to plant web…
Thirteen Nations Warn on FSB Router Targeting of Critical Infrastructure
A joint advisory from intelligence and cybersecurity agencies across four continents details how Russia's FSB…
CISA Adds Two Maximum-Severity Joomla Extension Flaws to Known Exploited Vulnerabilities Catalog
Zero-day exploitation of critical vulnerabilities in the iCagenda and Balbooa Forms Joomla extensions has prompted…
Balbooa Forms Vulnerability Added to CISA Known Exploited List, Patch Deadline Set for July
An unauthenticated file upload flaw in the Balbooa Forms component can lead to full remote…
Microsoft patches seventh Nightmare Eclipse zero-day as Defender race condition gets a quiet fix
CVE-2026-50656 closes the RoguePlanet chapter, but the broader tensions over vulnerability disclosure and bug bounty…
GhostApproval: Symlink Flaw Exposes AI Coding Agents to Workspace Escape and Remote Access
A vulnerability pattern affecting six major AI coding assistants lets attackers use decades-old symlink tricks…
CISA Flags Authentication Bypass and XSS Flaws in Digi International Serial Device Servers
Two vulnerabilities in legacy Digi International port server products allow unauthenticated access to restricted resources…