Critical Vulnerabilities Patched in F5 NGINX and BIG-IP Systems
PremiumF5 patched multiple NGINX and BIG-IP flaws that could allow configuration tampering, process termination, memory leaks, or code execution.
§Source · SecurityWeek
SecurityWeek
Every dispatch we have aggregated from SecurityWeek.
All dispatchesFriday, July 17
Wednesday, July 15
Global Advisory Highlights Russian Cyber Threats to Critical Routers
Joint advisory warns state-sponsored actors are exploiting poorly secured routers across critical infrastructure, risking espionage and disruption.
Claude for Chrome Vulnerabilities Expose Sensitive Google Data to Extensions
Anthropic's Claude for Chrome extension has exploitable flaws enabling extensions to read Gmail, Docs, and Calendar data.
Monday, July 13
Friday, July 10
Chrome 150 Update Bolsters Security with 27 Patches
PremiumGoogle's Chrome 150 fixes 27 vulnerabilities, including 13 use-after-free bugs and two critical flaws.
Massive KDDI Data Breach Exposes 12 Million Email Accounts
PremiumKDDI data breach exploited a third-party zero-day, affecting roughly 12 million users' email accounts for ISPs.
Wednesday, July 8
Critical Gitea Vulnerability Exploited to Bypass Authentication
Gitea flaw allows auth bypass via HTTP header, exposing repositories and secrets to attackers.
Critical Linux Vulnerability Allows VM Escape and Host Takeover
Januscape KVM vulnerability enables VM escape to execute code on hosts across Intel and AMD platforms.
Exploiting Adobe ColdFusion: A Race Against Time for Cybersecurity Teams
Active exploitation of Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) enables remote code execution on web servers.
Monday, July 6
Global Effort Disrupts NetNut Proxy Network Tied to Millions of Compromised Devices
PremiumLaw enforcement and industry partners disrupted a vast proxy network, cutting off millions of compromised devices and reducing attack surface.
Medtronic Data Breach Exposes Millions of Patient Records
PremiumMajor healthcare data breach exposed millions of patients’ personal and medical information, raising regulatory and patient-care risks.
Friday, July 3
CISA Urges Immediate Patching of Critical SharePoint Vulnerability
PremiumCISA reports active exploitation of a patched SharePoint RCE; prioritize remediation across SharePoint servers.
Cisco Urges Immediate Update as Unified CM Vulnerability Exploited
PremiumActive exploitation of a Unified CM flaw confirmed with PoC activity; update and monitor for exploit attempts.
FortiBleed Campaign Fuels Ransomware Attacks Across the Globe
PremiumFortiBleed credential theft connected to INC and Lynx ransomware shows large-scale credential harvesting used for intrusions. Mitigations include credential hygiene and network segmentation.
Wednesday, July 1
Critical Flaw in SimpleHelp Software Exploited to Spread Malware
CVE-led SimpleHelp vulnerability exploited to deliver malware and harvest credentials. Patch or upgrade to mitigate.
Critical Oracle E-Business Suite Flaw Under Active Exploitation
Critical flaw in Oracle E-Business Suite Payments component being exploited in the wild. Apply latest patches and monitor payment workflows.
Microsoft Defender Vulnerability Fuels Ransomware Attacks
Active exploitation of the Microsoft Defender privilege escalation flaw CVE-2026-33825 is fueling ransomware campaigns. Patches available; prioritise rapid remediation.
Monday, June 29
Polymarket Pledges Full Reimbursement After $3M Phishing Attack
PremiumFrontend script injection via a third-party vendor; user reimbursements underway.
Exploitation of PTC Windchill Vulnerability Poses Critical Risk to Industries
PremiumWindchill remote code execution CVE-2026-12569 exploited in the wild; patching and monitoring vital.
Get these articles delivered to your inbox.
Subscribe free