Threat actors have begun exploiting a critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition…
Microsoft's Azure Sentinel was found to have a CI/CD workflow weakness that allowed unauthenticated attackers to run code and steal credentials via…
Google's AI Agent Development Kit (adk-samples) had a CI/CD vulnerability enabling attacker code execution and repository takeover via pull requests.
The Python Software Foundation's Black tool had a CI/CD flaw allowing pull requests to execute attacker code and steal automation tokens.
The Lantronix EDS5000 Series are serial-to-IP converters affected by a critical code injection vulnerability (CVE-2025-67038) that is being actively exploited.
Ubiquiti UniFi OS is a network operating system affected by multiple critical vulnerabilities (CVE-2026-34908, CVE-2026-34909, CVE-2026-34910) that are being actively exploited.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of a critical vulnerability in Lantronix EDS5000…
An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months…