A cluster of 22 high-severity vulnerabilities has been identified in industrial serial-to-IP converters used to bridge legacy applications with modern […]
BRIDGE:BREAK flaws expose 20,000 industrial serial-to-IP converters Read More »
Unauthenticated attackers are rampantly exploiting a critical SQL injection flaw in endpoint management servers to execute unauthorized commands. The volume
Fortinet FortiClient EMS SQL injection exploitation surges following KEV deadline Read More »
An unauthenticated remote code execution vulnerability in the core Windows networking stack is being exploited to compromise VPN gateways and
Critical Windows IKEv2 remote code execution zero-day added to CISA KEV Read More »
Attackers are industrializing the exploitation of a publicly leaked privilege escalation flaw in the Windows security subsystem to gain SYSTEM-level
Active exploitation of BlueHammer Windows Defender privilege escalation flaw surging Read More »
A critical supply chain breach has impacted a major cloud development platform following the compromise of an employee Google Workspace
Vercel confirms internal breach linked to compromised AI tool and ShinyHunters extortion Read More »
Attackers are actively exploiting a critical spoofing vulnerability in SharePoint Server to falsify internal corporate communications and facilitate high-fidelity phishing.
Microsoft SharePoint Server zero-day exploited for trusted content spoofing Read More »
A critical prototype pollution vulnerability in the world most popular PDF reader was weaponized months before its public disclosure. This
Adobe Acrobat emergency update addresses prototype pollution zero-day Read More »
Attackers are industrializing the exploitation of a memory overread flaw to hijack enterprise sessions and bypass multi-factor authentication. This vulnerability
Active exploitation of Citrix NetScaler memory disclosure flaw surging globally Read More »
A critical remote code execution vulnerability that remained dormant for over a decade has been added to the federal list
CISA adds 13-year-old Apache ActiveMQ RCE flaw to KEV following mass exploitation Read More »
A critical remote code execution vulnerability that remained dormant for over a decade has been added to the federal list
CISA adds 13-year-old Apache ActiveMQ RCE flaw to KEV following active abuse Read More »
