Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit called LegacyHive, targeting a Windows User Profile Service (ProfSvc) arbitrary…
SAP has released its July 2026 security updates, addressing multiple vulnerabilities including a critical out-of-bounds write flaw in SAP NetWeaver Application Server…
The CERT Coordination Center (CERT/CC) has issued a warning about an undocumented authentication backdoor in multiple versions of Tenda router firmware. The…
BeyondTrust has released security updates to address multiple critical vulnerabilities in its Remote Support (RS) and Privileged Remote Access (PRA) products. The…
A critical reverse-proxy authentication bypass in Gitea Docker images, patched in June 2026. Threat actors were observed probing the flaw 13 days…
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
Check Point VPN is a virtual private network solution, associated with CVE-2026-50751 used as a lure in the ChocoPoC campaign.
A vulnerability in Argo CD where the Redis cache lacked authentication, allowing any pod in the cluster to poison deployment data. Fixed…
An unknown threat actor is exploiting CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp (CVSS 10.0), to deliver two new malware families:…
A critical security flaw in Oracle E-Business Suite, tracked as CVE-2026-46817 (CVSS 9.8), is now actively exploited in the wild. The vulnerability,…