SecurityWeek

CVE-led SimpleHelp vulnerability exploited to deliver malware and harvest credentials. Patch or upgrade to mitigate.

Critical flaw in Oracle E-Business Suite Payments component being exploited in the wild. Apply latest patches and monitor payment workflows.

Active exploitation of the Microsoft Defender privilege escalation flaw CVE-2026-33825 is fueling ransomware campaigns. Patches available; prioritise rapid remediation.

Frontend script injection via a third-party vendor; user reimbursements underway.

Windchill remote code execution CVE-2026-12569 exploited in the wild; patching and monitoring vital.

Curl patches a 25-year-old vulnerability, fixing 18 CVEs in a record release; update all curl-enabled products.

Chrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.

Zero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.

Curl patches a 25-year-old vulnerability, fixing 18 CVEs in a record release; update all curl-enabled products.

Chrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.

Zero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.

CISA warns federal agencies to patch CVE-2026-20253 quickly due to unauthenticated RCE risk.

Fortinet credential theft campaign impacts half of internet-facing Firewalls and VPNs; urgency to rotate creds and patch exposed devices.

Unvalidated input allowed OS access and privilege escalation; apply Cisco ISE patches immediately.

Industry debate on Fable 5 jailbreak claims; consider model risk management and vendor assurances.

Open-source OS command injection vector seen against Ivanti Sentry; monitor for privilege escalation attempts and honeypot triggers.

Chrome 149 patches 28 flaws, including use-after-free issues; hardening Chrome remains a priority for enterprise endpoints.

GreatXML exposes Windows BitLocker bypass via recovery XML, highlighting recovery-Partition risks.