#news


18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

May 15, 2026 // 13:07

Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years. The vulnerability, […]

Microsoft warns of Exchange zero-day flaw exploited in attacks

May 15, 2026 // 12:56

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site scripting […]

CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

May 15, 2026 // 12:21

The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited Vulnerabilities (KEV) […]

On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email

May 15, 2026 // 12:21

Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild. The […]

TeamPCP hackers advertise Mistral AI code repos for sale

May 15, 2026 // 01:56

The TeamPCP hacker group is threatening to leak source code from the Mistral AI project unless a buyer is found for the data. In a […]

Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026

May 15, 2026 // 00:17

On the first day of Pwn2Own Berlin 2026, security researchers collected $523,000 in cash awards after exploiting 24 unique zero-days. Today’s highlight was Orange Tsai’s attempt, who […]

OpenAI confirms security breach in TanStack supply chain attack

May 15, 2026 // 00:17

OpenAI says two employees’ devices were breached in the recent TanStack supply chain attack that impacted hundreds of npm and PyPI packages, causing the company […]

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

May 15, 2026 // 00:17

Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed attackers to […]

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin

May 15, 2026 // 00:17

Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst Statistics to obtain admin-level access to websites. Burst Statistics is a privacy-focused […]

New Fragnesia Linux flaw lets attackers gain root privileges

May 14, 2026 // 20:58

Linux distros are rolling out patches for a new high-severity kernel privilege escalation vulnerability that allows attackers to run malicious code as root. Known as […]

Previous 1 … 301 302 303 304 305 … 388 Next