A critical prototype pollution vulnerability in the world most popular PDF reader was weaponized months before its public disclosure. This […]
Adobe Acrobat emergency update addresses prototype pollution zero-day Read More »
Attackers are industrializing the exploitation of a memory overread flaw to hijack enterprise sessions and bypass multi-factor authentication. This vulnerability
Active exploitation of Citrix NetScaler memory disclosure flaw surging globally Read More »
A critical remote code execution vulnerability that remained dormant for over a decade has been added to the federal list
CISA adds 13-year-old Apache ActiveMQ RCE flaw to KEV following active abuse Read More »
A functional proof-of-concept exploit has been published for a critical command execution vulnerability in your automated threat analysis infrastructure. This
Public PoC exploit released for critical Fortinet FortiSandbox RCE vulnerability Read More »
A high-severity security bug in the latest version of the iPhone operating system allows for local bypass of the passcode
Apple developing emergency fix for iOS passcode bypass bug linked to Czech keyboard Read More »
A new iteration of the Mirai botnet is aggressively targeting internet-connected video recording devices and SOHO routers to build a
Nexcorium botnet scales operations by weaponizing legacy TP-Link and TBK exploits Read More »
The latest massive security update cycle for Microsoft products is headlined by an actively exploited SharePoint zero-day and a maximum-severity
Microsoft April Patch Tuesday addresses SharePoint zero-day and critical IKEv2 RCE Read More »
A critical remote code execution vulnerability that remained dormant for over a decade has been added to the federal list
CISA adds 13-year-old Apache ActiveMQ RCE flaw to KEV catalog Read More »
A critical remote code execution vulnerability in the core networking operating system used by global enterprises is under active zero-day
Cisco IOS XE zero-day CVE-2026-1834 exploited for root-level command execution Read More »
The federal deadline to patch a critical SQL injection flaw in endpoint management servers has expired. Initial access brokers are
Fortinet FortiClient EMS remediation deadline passes as initial access brokers pivot Read More »
