Active exploitation targets unpatched Fastjson 1.x RCE vulnerability CVE-2026-16723 in Java apps
Active wild exploitation targeting an unpatched remote code execution vulnerability in a widely integrated Java JSON parsing library continues to
CISA enforces BOD 26-04 patching timeline for Check Point SmartConsole authentication flaw CVE-2026-16232
Federal cybersecurity regulators have reached the compliance enforcement date under Binding Operational Directive 26-04 for an actively exploited security management
Active exploitation targets unpatched Fastjson 1.x RCE flaw CVE-2026-16723 in Spring Boot apps
Active in the wild exploitation has been documented targeting an unpatched remote code execution vulnerability in a widely utilized Java
Nine year old RefluXFS Linux kernel race condition CVE-2026-64600 yields local root privileges
A critical local privilege escalation vulnerability affecting the XFS filesystem implementation within the Linux kernel has been disclosed alongside verified
GitLab issues emergency security updates for critical SAML authentication bypass vulnerability CVE-2026-41209
Emergency security releases have been distributed for an enterprise software development platform to patch a critical authentication bypass vulnerability. The
ServiceNow releases emergency hotfixes for critical MID Server unauthenticated RCE flaw CVE-2026-38910
A critical unauthenticated command injection vulnerability located inside an enterprise IT orchestration bridge component has been resolved, preventing external threat
CISA adds Check Point SmartConsole authentication flaw CVE-2026-16232 to Known Exploited Vulnerabilities catalog
Federal cybersecurity regulators have updated the Known Exploited Vulnerabilities catalog following confirmed reports of real world zero day exploitation targeting
Certighost exploit enables low privileged Active Directory users to impersonate Domain Controllers
A critical exploit chain targeting Active Directory Certificate Services has been publicly disclosed alongside functional proof of concept code, allowing
Clop ransomware gang targets internet exposed PTC Windchill and FlexPLM instances in data theft campaign
A specialized data extortion campaign orchestrating wide scale automated file exfiltration has been identified targeting enterprise product lifecycle management platforms.
Threat actors weaponize GitHub Actions runners via compromised Packagist packages to target cPanel servers
A widespread software supply chain attack has been uncovered where threat actors compromised open-source developer accounts to turn continuous integration
