Cisco Urges Immediate Update as Unified CM Vulnerability Exploited
PremiumActive exploitation of a Unified CM flaw confirmed with PoC activity; update and monitor for exploit attempts.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesFriday, July 3
Wednesday, July 1
Critical Vulnerability in Kemp LoadMaster Exposes Networks to Remote Attacks
CVE-2026-8037 in Kemp LoadMaster allows pre-auth remote code execution. Update devices and validate configurations.
Critical Flaw in SimpleHelp Software Exploited to Spread Malware
CVE-led SimpleHelp vulnerability exploited to deliver malware and harvest credentials. Patch or upgrade to mitigate.
Critical Oracle E-Business Suite Flaw Under Active Exploitation
Critical flaw in Oracle E-Business Suite Payments component being exploited in the wild. Apply latest patches and monitor payment workflows.
Microsoft Defender Vulnerability Fuels Ransomware Attacks
Active exploitation of the Microsoft Defender privilege escalation flaw CVE-2026-33825 is fueling ransomware campaigns. Patches available; prioritise rapid remediation.
Monday, June 29
Cloud Storage Vulnerability Exposes Data Streams to Hijacking
PremiumThreat actors redirect audit logs and telemetry to attacker storage; tighten bucket controls.
Critical Flaws in Amazon Q Extension Expose Developers to Code Execution and Cloud Credential Theft
PremiumVS Code extension flaws enable arbitrary code execution and cloud credential theft via malicious repos.
Exploitation of PTC Windchill Vulnerability Poses Critical Risk to Industries
PremiumWindchill remote code execution CVE-2026-12569 exploited in the wild; patching and monitoring vital.
Friday, June 26
Curl Update Addresses 25-Year-Old Security Vulnerability
PremiumCurl patches a 25-year-old vulnerability, fixing 18 CVEs in a record release; update all curl-enabled products.
Google Chrome 149 Update Addresses Critical Security Flaws
PremiumChrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.
Months of Exploitation: Cisco SD-WAN Zero-Day Uncovered
PremiumZero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.
Curl Update Addresses 25-Year-Old Security Flaw
PremiumCurl patches a 25-year-old vulnerability, fixing 18 CVEs in a record release; update all curl-enabled products.
Chrome 149 Update Fixes Critical Security Vulnerabilities
PremiumChrome 149 fixes 18 severe bugs, many use-after-free with potential remote code execution risks; ensure auto-update is enabled.
Cisco SD-WAN Exploit Reveals Critical Security Gaps
PremiumZero-day CVE-2026-20245 was exploited for months before Cisco patching; rapid mitigation and monitoring recommended.
Wednesday, June 24
Monday, June 22
Millions of Users at Risk Due to Flaws in Popular Chrome Extensions
PremiumSpyder and MaXSS flaws in AI-powered Chrome extensions enable session hijacks and data access.
Vulnerability in Popular WordPress Plugin Threatens Over a Million Websites
PremiumCVE-2026-8713 in Avada/fusion builder enables file-deletion and potential RCE on affected sites.
Urgent Patch Required for Splunk Enterprise Vulnerability Exploited Post-Disclosure
PremiumCISA warns federal agencies to patch CVE-2026-20253 quickly due to unauthenticated RCE risk.
Urgent Call to Secure Fortinet Devices After Massive Credential Theft
PremiumFortinet credential theft campaign impacts half of internet-facing Firewalls and VPNs; urgency to rotate creds and patch exposed devices.
Get these articles delivered to your inbox.
Subscribe free