WordPress Plugin Compromise Underscores Supply Chain Vulnerabilities
PremiumWordPress plugin supply-chain compromise delivers infected releases; audit plugins and CI/CD.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesFriday, June 19
Urgent Patches Released for Cisco Identity Services Engine Vulnerabilities
PremiumUnvalidated input allowed OS access and privilege escalation; apply Cisco ISE patches immediately.
Massive Fortinet VPN Credential Exposure Threatens Global Enterprises
PremiumFortinet VPN credential exposure affects ~73k devices; patch now and rotate credentials to reduce risk.
Wednesday, June 17
Monday, June 15
Ivanti Sentry Vulnerability Sparks Security Concerns
PremiumOpen-source OS command injection vector seen against Ivanti Sentry; monitor for privilege escalation attempts and honeypot triggers.
Chrome 149 Update Addresses 28 Critical Security Vulnerabilities
PremiumChrome 149 patches 28 flaws, including use-after-free issues; hardening Chrome remains a priority for enterprise endpoints.
Critical Splunk Flaw Allows Remote Code Execution via Misconfigured Services
PremiumCritical RCE chain in Splunk enables unauthenticated remote code execution via PostgreSQL sidecar; immediate patching and access controls are essential.
Friday, June 12
Langflow Path Traversal Flaw Under Active Exploitation
PremiumHigh-severity Langflow path traversal allows arbitrary file writes; patching recommended immediately.
Federal Agencies Face New 3-Day Deadline for Critical Vulnerability Patches
PremiumBinding Directive 26-04 compels remediation of critical flaws within three calendar days for federal agencies.
CISA Mandates Risk-Based Patch Prioritization for Federal Agencies
PremiumNew directive requires prioritization of patching based on KEV risk; federal agencies must focus on the most dangerous, known exploited vulnerabilities.
Wednesday, June 10
Microsoft's June 2026 Patch Tuesday Tackles 198 Vulnerabilities
June 2026 cycle patches 198 flaws, including 3 zero-days actively exploited; prioritize critical systems first.
Critical Chrome Vulnerability Patched to Prevent Active Exploits
Chrome emergency patch closes a zero-day actively exploited, preventing remote code execution in many deployments.
Monday, June 8
Critical Serv-U Vulnerability Exploited: Immediate Action Required
PremiumCritical Serv-U vulnerability actively exploited; apply vendor patches and segment file-transfer services.
Google's Chrome 149 Update Tackles Record-Breaking Number of Vulnerabilities
PremiumMassive Chrome fix patching numerous critical/high flaws; prioritize browser patching and user awareness.
Instagram Password Reset Bug Exposes User Data
PremiumHigh-profile exposure in password reset flow; emergency hotfix deployed; verify user impact and tighten auth checks.
Urgent Action Needed as Linux Kernel Vulnerability Faces Active Exploitation
PremiumCritical Linux kernel flaw being actively exploited; remediation and KEV tracking require immediate patching and monitoring.
Friday, June 5
Critical Vulnerability in Magento Cache Warmer Poses Severe Threat to E-Commerce Sites
PremiumCritical RCE in Magento extension actively exploited; urgent patching recommended for e-commerce sites.
Critical Vulnerability in VS Code Allows Easy GitHub Token Theft
PremiumVulnerability enables token theft from GitHub via a simple interaction; affects developer workflows.
GitHub OAuth Token Theft via VS Code Exploit Resolved by Microsoft
PremiumA single-click payload can exfiltrate GitHub OAuth tokens from vulnerable repos via VS Code workflows.
Google Gemini Voice Assistant Vulnerability Exposed and Patched
PremiumAttackers could trigger dangerous actions on Google Gemini by poisoned notifications, enabling control over smart devices and calls.
Get these articles delivered to your inbox.
Subscribe free