CrowdStrike Zero-Day Exploit Released by Nightmare Eclipse
PremiumExtortion group Nightmare Eclipse alleges CrowdStrike zero-day release and leaks Manchester Airports Group data.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesMonday, September 7
Critical Security Flaw in ASUS Control Center Demands Immediate Attention
PremiumASUS Control Center Enterprise CVE-2026-75754 allows unauthenticated remote attackers full administrative control (CVSS 10.0).
Cybercriminals Exploit Citrix NetScaler Vulnerability in Ongoing Attacks
PremiumCritical Citrix NetScaler authentication bypass CVE-2026-19490 is now being actively exploited in attacks.
Massive Breaches Expose Millions of Sensitive Records in North America
PremiumVulnerable U #184 covers massive driver's license breach, McKesson breach, TeamPCP OSINT findings and more.
Critical PostgreSQL Vulnerability Exposes Databases and Servers to Severe Risks
PremiumPostGREShell CVE-2026-6471 lets replication access escalate to code execution, persistent superuser backdoor and server takeover.
JetBrains Urges Immediate Action After TeamCity Exploit Breach
PremiumUnpatched TeamCity led to a breach exposing AWS credentials; immediate secret rotation and patching urged.
OpenAI's GPT-6 Astra Sets New Benchmarks in Zero-Day Vulnerability Detection
PremiumGPT-6 Astra demonstrated the ability to find zero-days and produce exploits, raising AI-enabled offensive automation concerns.
Google Releases Critical Update for Chrome to Fix Exploited Zero-Day Vulnerability
PremiumChrome 152 fixes an actively exploited V8 zero-day; update browsers immediately to mitigate active attacks.
Critical Zero-Day Vulnerability Threatens Magento and Adobe Commerce Stores
PremiumCritical unauthenticated RCE 'StyleSmuggler' is actively exploited, allowing attackers to backdoor e-commerce stores.
Friday, September 4
Critical Flaw in JFrog Artifactory Allows Hackers to Forge Admin Access
PremiumCVE-2026-82329 in JFrog Artifactory is exploited to forge admin tokens, granting attackers administrative access to repos.
BGP Hijack Compromises Virtualizor Updates, Highlights Supply Chain Vulnerabilities
PremiumA BGP hijack diverted update traffic to deliver a malicious Virtualizor package, plus Project Watershed and other supply-chain incidents.
Elementor Pro Vulnerability Compromises WordPress Security
PremiumCVE-2026-32475 in Elementor Pro is exploited to install webshells and execute arbitrary server commands for site takeover.
Zero-Day Vulnerability Alleged in Avast Antivirus by Researcher
PremiumResearcher Chaotic Eclipse published a PoC for an alleged Avast Antivirus privilege-escalation zero-day affecting Windows 11 systems.
Cyber Attack Exposes Vulnerabilities in Philippine Nuclear Agency
PremiumAttackers exploited unpatched ownCloud to access the Philippines nuclear agency, exfiltrating reactor databases and credentials.
Rockwell Automation Addresses Critical Vulnerabilities in Industrial Products
PremiumRockwell Automation released advisories and patches for multiple vulnerabilities across RSLinx, FactoryTalk, and other industrial products.
Pegasus Spyware Targets Serbian Activists in Zero-Click Attack
PremiumNSO Group Pegasus used an iMessage zero-click exploit to infect a Serbian student activist's iPhone enabling remote surveillance.
FalconFlank Exploit Unveils Privilege Escalation Vulnerability in CrowdStrike Falcon
PremiumResearcher released a FalconFlank PoC showing privilege escalation in CrowdStrike Falcon sensor, creating urgent patch/practice risk.
SonicWall SMA1000 Appliances Face New Security Threats
PremiumMultiple zero-days in SonicWall SMA1000 appliances are being actively exploited, enabling unauthenticated RCE and potential network compromise.
Wednesday, September 2
Critical Ruby on Rails Flaw Under Active Exploitation by Threat Actors
CyberWire notes active exploitation of a critical Ruby on Rails vulnerability enabling reconnaissance and potential RCE.
WatchGuard Addresses Critical Security Flaws in Fireware OS and Dimension
WatchGuard patched three critical Fireware OS iked-process issues that allowed unauthenticated remote code execution.
Get these articles delivered to your inbox.
Subscribe free