#flaws


Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw

Jul 31, 2026 // 14:56

An academic study has disclosed a “widespread class” of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) […]

VMware fixes three critical flaws allowing auth bypass, VM escapes

Jul 30, 2026 // 21:17

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass […]

ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

Jul 30, 2026 // 18:28

A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide, a […]

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Jul 29, 2026 // 19:51

Broadcom has released security updates to address multiple security flaws impacting VMware ESX, vCenter, Workstation, and Fusion, three of which have been designated as critical […]

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers

Jul 24, 2026 // 15:01

A crafted SVG submitted to Bing’s image search ran commands as NT AUTHORITY\SYSTEM on Microsoft’s production image-processing workers, and as root on the Linux machines […]

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Jul 24, 2026 // 13:31

Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and […]

New InfraTrust report reveals infrastructure flaws admins should patch first

Jul 22, 2026 // 17:16

Eclypsium has launched InfraTrust, a new infrastructure cybersecurity knowledge base and monthly InfraTrust Pulse report designed to help organizations prioritize vulnerabilities affecting infrastructure, firmware, networking, […]

Critical wp2shell WordPress flaws exploited to install webshells

Jul 21, 2026 // 19:56

Hackers are exploiting the “wp2shell” critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. […]

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

Jul 21, 2026 // 01:36

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. Last […]

WordPress Core “wp2shell” RCE flaws get public exploits, patch now

Jul 19, 2026 // 00:58

Public exploits have been released for the critical “wp2shell” remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately. […]

Previous 1 … 16 17 18 19 20 … 26 Next