Unpatched GeoServer SQL injection zero day exploited in wild to achieve remote code execution
Active wild exploitation targeting an unpatched zero day vulnerability in a widely deployed open source geospatial data platform has been […]
ShieldBreak zero day exploit bypasses Microsoft Defender protections to grant local SYSTEM privileges
Technical disclosures published by independent vulnerability researchers have revealed a patch bypass vulnerability affecting endpoint protective software. The zero-day exploit
APT actors exploit critical VMware vCenter directory traversal RCE vulnerability CVE-2026-59310
Active exploitation targeting enterprise virtualization management infrastructure has been uncovered, with advanced threat actors exploiting a critical directory traversal bug
Surge in wild exploitation targets Microsoft SharePoint authentication bypass CVE-2026-55040 following PoC release
Threat monitoring arrays report a sharp increase in automated scanning and exploitation attempts targeting enterprise document management servers. Threat actors
Threat actors weaponize public Rapid7 proof of concept exploit for Microsoft SharePoint CVE-2026-55040
Active wild exploitation targeting on-premises document management servers has accelerated following the public release of a functional proof of concept
CISA adds Cisco Secure Firewall ASA and FTD heap inspection flaw CVE-2026-20349 to KEV catalog
Federal cybersecurity regulators have updated the Known Exploited Vulnerabilities catalog to mandate rapid patching for a heap inspection flaw in
CISA adds actively exploited Windows WinSock zero day CVE-2026-68820 to KEV catalog
A critical privilege escalation vulnerability in a core Windows networking driver is undergoing active wild exploitation by state-sponsored threat groups.
CISA adds actively exploited Windows WinSock zero day CVE-2026-68820 to KEV catalog Read More »
China linked Storm-1175 group weaponizes N-able N-central auth bypass CVE-2026-18577 to deploy StormEncryptor
Threat intelligence advisories warn that a financially motivated threat cluster has begun weaponizing a recently disclosed remote management console vulnerability
Cisco warns of high-severity ClamAV parser vulnerabilities with public proof of concept exploit code
Security advisories published by enterprise security maintainers warn that widely deployed antimalware scanning engines contain multiple high-severity file parsing vulnerabilities.
CISA reaches BOD 26-04 compliance deadline for Progress LoadMaster command injection flaw CVE-2026-8037
Federal cybersecurity regulators have reached the mandatory compliance deadline under Binding Operational Directive 26-04 for an actively exploited load balancing
