#flaws


NIST to stop rating non-priority flaws due to volume increase

Apr 19, 2026 // 17:38

The National Institute of Standards and Technology will stop assigning severity scores to lower-priority vulnerabilities due to the growing workload from rising submission volumes. Starting […]

Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution

Apr 16, 2026 // 14:30

Cisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution and allow […]

Microsoft pays $2.3M for cloud and AI flaws at Zero Day Quest

Apr 15, 2026 // 19:58

Microsoft has awarded $2.3 million to security researchers after receiving nearly 700 submissions during this year’s Zero Day Quest hacking contest. Tom Gallagher, Vice President of […]

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More

Apr 15, 2026 // 15:40

A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April’s Patch Tuesday releases. Topping the list is an […]

New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released

Apr 14, 2026 // 19:00

Two high-severity security vulnerabilities have been disclosed in Composer, a package manager for PHP, that, if successfully exploited, could result in arbitrary command execution. The vulnerabilities have been described as […]

Chinese group Storm-1175 swiftly uses unknown flaws to spread Medusa ransomware.

Apr 7, 2026 // 09:39

A Chinese cyber threat group known for using Medusa ransomware has been found to be exploiting both new and recently patched vulnerabilities in order to […]

Ransomware (Qilin, Warlock) exploits driver flaws to disable over 300 EDR security tools.

Apr 6, 2026 // 13:08

Cisco Talos and Trend Micro have found that threat actors using Qilin and Warlock ransomware are employing the bring your own vulnerable driver (BYOVD) method […]

ShareFile Hacking: Chain flaws for RCE before logging in. Progress ShareFile vulnerable to RCE attack chain.

Apr 2, 2026 // 17:17

A combination of two security weaknesses in Progress ShareFile, a platform for secure file sharing in businesses, can be used to steal files from affected […]

Claude AI discovers remote code execution (RCE) flaws in Vim/Emacs; file opening triggers exploit.

Apr 1, 2026 // 09:58

Claude, a new AI assistant, helped discover flaws in the popular text editors Vim and GNU Emacs. These flaws allow attackers to remotely execute code […]

CISA: Apple, Craft CMS, Laravel Flaws in KEV. Patch by 4/3/26 Mandated.

Mar 21, 2026 // 11:34

On Friday, the U.S. agency responsible for cybersecurity, CISA, added five security weaknesses in products from Apple, Craft CMS, and Laravel Livewire to its list […]

Previous 1 … 23 24 25 26 Next