Check Point Security Flaw Permits Remote Code Execution Without Authentication
PremiumCritical unauthenticated vulnerability in Check Point Security Management and Log Servers allows remote root code execution.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesFriday, September 18
Cisco Releases Critical Security Patches for FMC, ISE, and Nexus Dashboard
PremiumCisco released patches for dozens of vulnerabilities across FMC, ISE and Nexus Dashboard, including RCE and SQL injection fixes.
Google Chrome 153 Update Patches Critical Security Vulnerabilities
PremiumGoogle released Chrome 153 fixing 42 vulnerabilities including three critical bugs; update browsers to reduce exposure.
Critical Zero-Day Vulnerability in Cisco's Identity Services Engine Under Active Exploitation
PremiumCisco confirms a maximum-severity zero-day in Identity Services Engine is being actively exploited; apply vendor updates and detect indicators.
Wednesday, September 16
Rapid Exploitation of Marimo Vulnerability Highlights Human Skills in Cyberattacks
Operator exploited Marimo RCE and pivoted to an SSH bastion in eight seconds, demonstrating human-agile exploitation speed enhanced by AI tools.
Apple Addresses Security Risks with Extensive iOS and macOS Updates
Apple released iOS 27 and macOS Golden Gate 27, patching ~200 vulnerabilities including kernel and privilege-escalation flaws.
Microsoft Issues Emergency Patch to Resolve RDS and Hyper-V Failures
Microsoft issued out-of-band emergency fixes after Patch Tuesday caused RDS issues, addressing service failures and related regressions.
Critical Vulnerability in LiteSpeed Enterprise Risks Server Security
Critical LiteSpeed Enterprise vulnerability could allow low-privilege hosting account to achieve root on shared servers, risking cross-tenant compromise.
Red Heron's Aggressive Exploitation of Gitea RCE Hits Multiple Nations
Red Heron exploited Gitea RCE to compromise 13 orgs across six countries, targeting exposed instances for swift takeover.
Critical Vulnerability in WooCommerce Plugin Threatens WordPress Sites
Attackers actively exploit critical WooCommerce Wholesale Lead Capture premium plugin to upload PHP backdoors and compromise WordPress sites.
Cyberattack on Thai ISP Exploits Fortinet and F5 Vulnerabilities
Thai ISP 3BB breached leveraging Fortinet and F5 vulnerabilities; attackers exfiltrated subscriber credentials and deployed backdoors.
Sandworm Exploits Cisco Vulnerabilities to Revive Cyclops Blink Botnet
Sandworm chains Cisco vulnerabilities to deploy an upgraded Cyclops Blink botnet, reviving disrupted infrastructure-takeover tooling.
Critical GitLab Vulnerability Exploited: Urgent Patch Required
Threat actors exploit a maximum-severity GitLab path traversal (CVE-2026-85706) to risk supply-chain and repo compromises.
Massive Data Breach at Japan's Digital Agency Exposes Thousands
Japan's Digital Agency breached via a VPN flaw, exposing ~240,000 personnel records; review VPN appliances and incident response plans.
Ransomware Gangs Exploit Critical VMware Flaw: Immediate Action Required
CISA warns ransomware gangs are exploiting a critical VMware vCenter RCE to spread ransomware; patch vCenter immediately.
Chinese Hackers Exploit Unpatched Flaws in Chrome and Windows to Deploy GRIMWEDGE Backdoor
China-linked actors chained Chrome and Windows flaws to deploy GRIMWEDGE JavaScript backdoor against NGOs; validate browser and OS patching.
Cisco Addresses Critical SQL Injection Flaw in Secure Email Gateway
Cisco patched a critical Secure Email Gateway SQLi zero-day (CVE-2026-76461) that was actively exploited; immediate patching recommended.
Monday, September 14
GuardBreaker Technique Exploits AI Vulnerabilities in Malware Analysis
PremiumObservers detected GuardBreaker prompt-injection technique used to conceal dangerous prompts inside benign comments to fool AI scanners.
PaperCut Enhances Security with New Maintenance Releases
PremiumPaperCut released maintenance releases replacing emergency patches for two flaws that were actively exploited in the wild.
Massive Patch Tuesday Update Fixes Critical Microsoft and SAP Vulnerabilities
PremiumSANS NewsBites summarizes Patch Tuesday fixes including hundreds of Microsoft flaws and an SAP kernel patch.
Get these articles delivered to your inbox.
Subscribe free