#flaw


Kiteworks patches critical flaw, brings customer systems online

Sep 29, 2026 // 13:16

American tech company Kiteworks has lifted a precautionary advisory asking customers to shut down systems after patching a critical vulnerability. Formerly known as Accellion, it […]

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Sep 29, 2026 // 13:11

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in […]

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

Sep 29, 2026 // 13:10

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log […]

Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

Sep 28, 2026 // 21:08

The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, […]

Cloudflare fixes Containers cross-tenant flaw exposing customer data

Sep 27, 2026 // 17:57

Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers’ containers […]

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Sep 26, 2026 // 14:47

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The […]

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Sep 26, 2026 // 13:38

Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create […]

Elementor WordPress flaw lets attackers create admin accounts

Sep 26, 2026 // 00:58

A cross-site request forgery (CSRF) vulnerability in the Elementor plugin for WordPress could allow an unauthenticated attacker to create administrator accounts. Threat actors can exploit […]

ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw

Sep 26, 2026 // 00:58

The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through […]

Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data

Sep 25, 2026 // 13:27

A flaw in Cloudflare Containers let a paying customer read data that other customers’ containers had left behind on the same server, Cloudflare and the […]

Previous 1 2 3 4 5 6 … 60 Next