Urgent Patch Released for Critical Vulnerability in N-central Platform
N-able released multiple hotfixes for N-central RMM to address a critical, actively exploited zero-day; verify hotfix application and unknown accounts.
§Source · SecurityWeek
SecurityWeek
Every dispatch we have aggregated from SecurityWeek.
All dispatchesWednesday, September 9
Monday, September 7
Critical Vulnerability in Elementor Pro Plugin Exploited by Hackers
PremiumElementor Pro CVE-2026-32475 arbitrary file upload is exploited to hack WordPress sites (CVSS 9.8).
Critical PostgreSQL Vulnerability Exposes Databases and Servers to Severe Risks
PremiumPostGREShell CVE-2026-6471 lets replication access escalate to code execution, persistent superuser backdoor and server takeover.
Google Releases Critical Update for Chrome to Fix Exploited Zero-Day Vulnerability
PremiumChrome 152 fixes an actively exploited V8 zero-day; update browsers immediately to mitigate active attacks.
Friday, September 4
Massive Data Breach Hits Manchester Airports Group, Exposing Millions
PremiumFulcrumSec published roughly 550GB of Manchester Airports Group data after MAG refused a ransom demand, exposing passenger records.
Rockwell Automation Addresses Critical Vulnerabilities in Industrial Products
PremiumRockwell Automation released advisories and patches for multiple vulnerabilities across RSLinx, FactoryTalk, and other industrial products.
Massive Data Breach Exposes 153 Million Driver's Licenses
PremiumScans of 153 million US and Canadian driver's licenses are being sold on the dark web, risking large-scale identity fraud.
Wednesday, September 2
Nutex Health Faces Data Breach by Notorious Ransomware Group
Ransomware group claims Nutex Health breach; SEC filing says patient, employee, provider, business, and financial information accessed.
Coast Guard Launches New Office to Strengthen Maritime Cybersecurity
US Coast Guard creates centralized Office of Maritime Cybersecurity Policy to govern port, vessel, and maritime facility cybersecurity.
AI-Assisted Porting of PLC Exploits: Costs and Challenges
Forescout used an LLM to port a PLC RCE exploit between WAGO models, lowering technical barriers for OT attacks.
WatchGuard Addresses Critical Security Flaws in Fireware OS and Dimension
WatchGuard patched three critical Fireware OS iked-process issues that allowed unauthenticated remote code execution.
Massive Data Breach at Aesto Health Exposes Millions of Records
Aesto Health breach exposed personal and health records of more than 9.5 million individuals from AWS infrastructure.
Exploitation of JFrog Artifactory Vulnerability Raises Security Concerns
Authentication bypass in JFrog Artifactory (CVE-2026-82329) is actively exploited to mint admin tokens and seize repositories.
Friday, August 28
Norwegian Digital Services Targeted by Pro-Russian Cyberattack
PremiumServer Killers group claims a major cyberattack that disrupted Norway's public digital services, causing service outages and data disruption.
US Cripples Chinese Hacking Network Targeting Military and Infrastructure
PremiumU.S. agencies disrupted a China-linked hacking platform (QTFY) used against military and critical infrastructure, seizing infrastructure domains.
Wednesday, August 26
WordPress Sites Under Siege from MiniOrange Plugin Vulnerabilities
Authentication bypasses CVE-2026-61979 and CVE-2026-15981 in miniOrange SAML 2.0 plugin are being exploited to forge admin logins.
New Malware Targets Car Head Units, Expands Notorious Botnet
Researchers link novel car head unit malware to BadBox botnet, expanding vehicle infection surface for mass abuse.
Critical Oracle WebLogic Flaw Demands Immediate Attention
CISA says CVE-2026-21962 in Oracle WebLogic is actively exploited, enabling remote compromise; immediate patching recommended.
Monday, August 24
Friday, August 21
Get these articles delivered to your inbox.
Subscribe free