ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories Ravie LakshmananJul 23, 2026Hacking News / Cybersecurity News Most…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
Claude Cowork Sandbox Escape Flaw Exposes Mac Files to AI Agent
Cybersecurity researchers at Accomplish AI have disclosed a sandbox escape vulnerability in Anthropic's Claude Cowork, tracked as SharedRoot, that allows an AI…
CVE-2018-11511: Critical Vulnerability in ASUSTOR ADM
CVE-2018-11511 is a critical vulnerability in ASUSTOR ADM with a CVSS score of 9.8, exploited by the JadeProx operation.
CVE-2021-24139: Critical Vulnerability in 10Web Photo Gallery WordPress Plugin
CVE-2021-24139 is a critical vulnerability in the 10Web Photo Gallery WordPress plugin with a CVSS score of 9.8, exploited by the JadeProx…
CVE-2021-31755: Critical Vulnerability in Tenda AC11 Routers
CVE-2021-31755 is a critical vulnerability in Tenda AC11 routers with a CVSS score of 9.8, exploited by the JadeProx operation and listed…
CVE-2021-32305: Critical Vulnerability in WebSVN
CVE-2021-32305 is a critical vulnerability in WebSVN with a CVSS score of 9.8, exploited by the JadeProx operation.
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
A critical Linux kernel vulnerability, tracked as CVE-2026-64600 and named RefluXFS, has been disclosed by Qualys. The flaw, present in Linux kernels…
CVE-2026-64600: RefluXFS Linux Kernel Flaw
A critical Linux kernel vulnerability in XFS filesystem reflink handling, allowing local privilege escalation to root. Affects Linux 4.11+ with reflink-enabled XFS.…
Check Point Patches Actively Exploited SmartConsole Authentication Bypass Flaw CVE-2026-16232
Check Point has released security updates to address multiple vulnerabilities in its Security Management and Multi-Domain Management (MDSM) products, including a critical…
CVE-2026-62144: Check Point Security Management Authentication Bypass
An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management (CVSS 9.3) allowing unauthenticated remote attackers to execute administrative…