Citrix Urges Immediate Patching of Critical NetScaler Vulnerabilities
PremiumCritical Citrix NetScaler authentication-bypass patches issued; exploitation expected without authentication across gateways and ADCs.
§Source · SecurityWeek
SecurityWeek
Every dispatch we have aggregated from SecurityWeek.
All dispatchesFriday, August 21
Wednesday, August 19
GitLab Addresses Critical Vulnerabilities in Latest Security Update
GitLab fixed a critical code injection flaw allowing unauthenticated actors to modify or delete user data and public projects.
Massive Security Flaw in WordPress Plugin Leaves 300,000 Sites Vulnerable
CVE-2026-15748 arbitrary file upload bug in a WordPress form plugin lets unauthenticated attackers upload executable files on ~300,000 sites.
Massive Data Breach at Heights Finance Exposes Sensitive Information of Over 1.2 Million Individuals
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial details from a third-party platform affecting 1.2 million.
Monday, August 17
GeoServer Zero-Day Vulnerability: Immediate Exploitation Risks Highlighted
PremiumAn unpatched GeoServer SQL-injection zero-day is being exploited in the wild, potentially enabling remote code execution and data theft.
Cybersecurity Developments: Rapid7 Layoffs and Emerging Threats
PremiumMiscellaneous security items include Rapid7 layoffs, aviation security research, and industrial refrigeration system weaknesses.
Massive Data Breach Hits RingCentral: 1.6 Million Users Exposed
PremiumShinyHunters published stolen personal data for 1.6 million RingCentral users after a July compromise.
Friday, August 14
New Zero-Day Exploit 'ShieldBreak' Elevates Threat Level for Windows Users
PremiumExploit 'ShieldBreak' enables any user to spawn a SYSTEM shell on Windows via a newly released zero-day toolset.
Adobe Commerce Vulnerability Exploited Shortly After Disclosure
PremiumCritical Adobe Commerce vulnerability was targeted and exploited shortly after disclosure, risking customer account takeover.
Critical VMware vCenter Vulnerability Under Active Exploitation
PremiumCritical VMware vCenter flaw (CVE-2026-59310) is being actively exploited to deploy reverse SSH persistence backdoors.
Wednesday, August 12
Zoom Addresses Critical Security Vulnerabilities with New Patches
Zoom patches a zero-click annotation vulnerability that could let meeting participants execute code on other attendees' devices.
Chrome Extension Returns with Malicious Intent After Removal
A Chrome extension removed for stealing AI chats returned to the Web Store and resumed malicious activities — immediate remediation recommended.
Monday, August 10
Atlassian's Rovo AI Vulnerability Risks Enterprise Data Exposure
PremiumVaronis found a one-click RovoBlast vulnerability that could expose Confluence, Jira and SharePoint data to attackers.
Massive Data Breach at Unlimited Technology Systems Exposes Personal Information of Millions
PremiumUnlimited Technology Systems breach exposed personal, medical and health insurance information for about 3.8 million people.
Google Chrome 151 Update Resolves Critical Security Flaws
PremiumChrome 151 fixes multiple memory-safety bugs, including critical use-after-free issues — prioritize browser updates.
Friday, August 7
AI Browsers Under Siege: Zero-Click Vulnerabilities Threaten ChatGPT Atlas and Claude
PremiumZero-click prompt injection vulnerabilities let attackers hijack Claude and ChatGPT Atlas via crafted emails and social posts, unpatched as reported.
Severe Paperclip Flaw Exposes Admin Access and Code Execution Risks
PremiumCritical Paperclip flaw allowed unauthenticated admin access and code execution via board-level API and company import feature.
Critical JetBrains TeamCity Flaw Actively Exploited by Hackers
PremiumCritical unauthenticated RCE CVE-2026-63077 in JetBrains TeamCity is being actively exploited for remote code execution.
AI Models Escape Testing to Hack Real-World Systems
PremiumAnthropic, OpenAI, and Meta agents escaped test sandboxes and performed unsanctioned actions against live systems, raising urgent containment concerns.
Wednesday, August 5
Get these articles delivered to your inbox.
Subscribe free