A critical use-after-free vulnerability residing inside the Stream Control Transmission Protocol implementation of the Linux kernel has been disclosed. The
A critical unauthenticated command injection vulnerability in an enterprise application delivery controller has been formally added to the federal Known
Active software supply chain intrusions targeting on-premises video conferencing infrastructure have been detailed, where hacktivist groups exploited unauthenticated server flaws
A maximum severity unauthenticated command execution flaw residing within an artificial intelligence orchestration framework has been detailed, enabling remote network
Federal cybersecurity regulators are actively tracking compliance remediation windows following the addition of a critical continuous integration server vulnerability to
A critical infrastructure cyberattack has impacted core operational logistics systems across major commercial maritime facilities. The security incident has caused
Forensic incident reports have exposed a stealthy post-exploitation technique where threat actors utilize an unauthenticated web application flaw to compile
Security updates have been distributed for an enterprise networking management ecosystem to patch 15 security vulnerabilities within zero-touch provisioning routines.
A maximum severity unauthenticated remote code execution vulnerability residing inside an enterprise continuous integration build platform has been added to
A missing encryption of sensitive data vulnerability in a widely deployed Java application server cluster component has been added to
CISA adds Apache Tomcat missing encryption vulnerability CVE-2026-34486 to KEV catalog Read More »
