#flaw


Russian hackers exploit Zimbra zero-click flaw for email theft

Jul 23, 2026 // 19:56

CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by […]

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Jul 23, 2026 // 16:30

Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic’s Claude Cowork that makes it possible to break out of the confines of a Linux […]

New RefluXFS Linux flaw lets attackers gain root privileges

Jul 23, 2026 // 14:56

A nine-year-old race condition vulnerability in the Linux kernel’s XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges. […]

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

Jul 23, 2026 // 11:10

RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS […]

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Jul 23, 2026 // 10:41

Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come […]

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

Jul 22, 2026 // 21:10

Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access […]

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

Jul 22, 2026 // 18:10

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, […]

Adobe Chrome extension flaw let sites access private WhatsApp chats

Jul 22, 2026 // 16:36

The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication. The attack […]

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

Jul 22, 2026 // 15:40

A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 […]

CISA orders urgent action on actively exploited Langflow RCE flaw

Jul 22, 2026 // 14:56

The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for […]

Previous 1 … 38 39 40 41 42 … 60 Next