Critical BitLocker Vulnerability Exposes Windows Devices to Physical Attacks
PremiumBitLocker zero-day CVE-2026-50661 allows physical attackers with hands-on access to bypass device encryption protections.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesFriday, July 17
CISA Urges Immediate Patch for Exploited SharePoint Vulnerabilities
PremiumCISA warns of actively exploited SharePoint vulnerabilities and flags a stealthy ransomware family and law-enforcement takedowns.
Microsoft-Revoked UEFI Shims Pose Secure Boot Bypass Risk
PremiumEleven Microsoft-signed legacy UEFI shims can be abused to bypass Secure Boot, undermining platform integrity across devices.
Critical Vulnerabilities Patched in F5 NGINX and BIG-IP Systems
PremiumF5 patched multiple NGINX and BIG-IP flaws that could allow configuration tampering, process termination, memory leaks, or code execution.
LegacyHive Zero-Day Exploit Puts Windows User Profiles at Risk
PremiumResearcher published LegacyHive Windows zero-day PoC impacting User Profile Service, enabling arbitrary hive load privilege escalation.
Critical Vulnerability in Laravel Livewire Leads to Massive Credential Theft
PremiumAttackers exploited Laravel Livewire CVE-2025-54068 to run PHP deserialization payloads and steal credentials and secrets at scale.
Federal Agencies Urged to Patch Oracle Vulnerability Amid Active Exploits
PremiumCISA issued an emergency order forcing federal agencies to patch an actively exploited Oracle E-Business Suite vulnerability immediately.
Critical Vulnerabilities in SonicWall SMA1000 Series Under Active Attack
PremiumSonicWall SMA1000 zero-days (including SSRF CVE-2026-15409) are actively exploited; apply mitigations and emergency patches.
Microsoft's Largest Patch Tuesday Addresses Over 600 Vulnerabilities, Including Active Zero-Day Exploits
PremiumMicrosoft released its largest Patch Tuesday, fixing hundreds of CVEs including two zero-days actively exploited, requiring prioritization.
Wednesday, July 15
SonicWall Urges Immediate Patching of SMA1000 Vulnerabilities Amid Active Exploitation
SonicWall discloses CVE-2026-15409 and CVE-2026-15410 in SMA1000 actively exploited in zero-day attacks; customers urged to patch immediately.
New Phishing Kits Exploit MFA Vulnerabilities in Microsoft 365
Jalisco and OmegaLord phishing kits target Microsoft 365, using MFA-evasion techniques to steal credentials and session tokens.
Cyberattack Forces Nihon Kotsu to Halt Operations, Exposing Sector Vulnerabilities
Japan's Nihon Kotsu halts systems after cyberattack impacting dispatch and operations, showing transport-sector operational risks from intrusions.
CISA Alerts Organizations to SharePoint Vulnerability Exploits
CISA issues alert urging immediate SharePoint hardening after new exploitations affecting enterprise SharePoint environments were observed.
Claude for Chrome Vulnerabilities Expose Sensitive Google Data to Extensions
Anthropic's Claude for Chrome extension has exploitable flaws enabling extensions to read Gmail, Docs, and Calendar data.
Zero-Day Vulnerability Forces Emergency Action on ShareFile Systems
Critical ShareFile Storage Zone Controller zero-day forced emergency shutdowns and prompted immediate vendor guidance and patches.
Microsoft's July 2026 Patch Tuesday Addresses Record 570 Vulnerabilities, Including Critical Zero-Days
Record Patch Tuesday: Microsoft released fixes for hundreds of vulnerabilities, including multiple zero-days; urgent prioritization required.
Monday, July 13
Global Exploitation Campaign Targets Vulnerable CMS Systems
PremiumACSC warns of global exploitation campaign targeting vulnerable CMS platforms and plugins, urging patching and monitoring.
Urgent Update Required: Critical XSS Vulnerability in Zimbra's Classic Web Client
PremiumCritical stored XSS in Zimbra Classic Web Client could execute crafted-email scripts and enable arbitrary code or session compromise.
Critical Security Flaw in Gitea Docker Image Under Active Exploitation
PremiumCritical auth-bypass in official Gitea Docker image is actively exploited to impersonate any user, including administrators.
Critical U-Boot Vulnerabilities Threaten Device Security with Potential Pre-Boot Code Execution
PremiumSix U-Boot vulnerabilities allow device crashes and potential pre-boot code execution, risking persistent firmware compromise.
Get these articles delivered to your inbox.
Subscribe free