A critical vulnerability in the F5 BIG-IP Access Policy Manager ❨APM❩ has been reclassified to indicate its potential for unauthenticated […]
F5 BIG-IP APM vulnerability reclassified as unauthenticated RCE under active abuse Read More »
A major data breach has impacted a leading global dating platform provider, with threat actors claiming to have exfiltrated 10
ShinyHunters breach Match Group exposing 10 million user records across Tinder and Hinge Read More »
A critical vulnerability in a foundational open-source routing suite allows attackers to crash core networking infrastructure and disrupt entire autonomous
Critical OSPF integer overflow in FRRouting CVE-2026-28532 crashes core routers Read More »
One of the largest home security providers in the United States has confirmed a major data breach impacting millions of
ADT identity breach exposes 5.5 million records following Okta vishing attack Read More »
A critical authentication bypass vulnerability in the world most popular web hosting control panel is under active zero-day exploitation. This
Critical cPanel and WHM authentication bypass CVE-2026-41940 exploited as zero-day Read More »
A critical Windows protection mechanism failure that allows for the zero-click theft of hashed credentials has been added to the
CISA adds zero-click Windows NTLM hash leak vulnerability to KEV catalog Read More »
A sophisticated Python-based backdoor is targeting developer workstations to harvest browser cookies and cloud access tokens. This malware utilizes legitimate
DEEP DOOR Python backdoor utilizes tunneling services for stealthy exfiltration Read More »
A critical remote code execution vulnerability in the world most popular code hosting platform allowed authenticated users to compromise backend
Critical GitHub RCE vulnerability CVE-2026-3854 exposed millions of repositories Read More »
A critical authentication bypass vulnerability has been identified in a foundational web hosting management platform, exposing thousands of websites to
Critical cPanel authentication bypass allows unauthenticated server takeover Read More »
Two critical vulnerabilities impacting core Windows components and popular remote management software have been added to the federal list of
CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to KEV Read More »
