§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatches
Loading
Loading
§Topic · CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesRockwell fixed code-execution vulnerabilities in Arena simulation software that could be weaponized against industrial organizations.
HollowGraph malware uses compromised Microsoft 365 calendars as covert two-way dead-drop C2 channels leveraging Graph API.
Qilin ransomware exploits critical Palo Alto PAN-OS GlobalProtect authentication bypass to breach networks and deploy ransomware.
Windows LegacyHive local privilege escalation zero-day allows attackers to gain elevated privileges on up-to-date Windows systems.
CVE-2026-42533 in nginx script engine enables crashing worker processes and potential remote code execution since 2011.
Russian intelligence hijacks IP cameras across Europe and Ukraine to monitor military logistics and transport routes.
Bit2Watt research shows GPU workloads by cloud tenants can oscillate data-center power draw, threatening grid stability without code exploits.
Attackers exploited Oracle E-Business Suite zero-day to exfiltrate personal, financial and health information from Este9e Lauder systems.
ServiceNow AI platform CVE-2026-6875 is being exploited for remote code execution days after disclosure.
SharePoint CVE-2026-50522 exploited to steal machine keys enabling persistent access even after patching.
Get these articles delivered to your inbox.
Subscribe free