#now


Max severity SonicWall SMA1000 flaw now exploited in attacks

Oct 9, 2026 // 15:36

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. Tracked as CVE-2026-102255, the flaw affects […]

Rejetto HFS servers now actively scanned for critical RCE flaw

Oct 6, 2026 // 12:57

Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution […]

Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content

Sep 24, 2026 // 23:38

The “third-party[.]com” domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a harmless decoy to […]

Placeholder domain used in dev docs now serves ClickFix attacks

Sep 24, 2026 // 23:38

The “third-party.com” domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows […]

CISA: Ransomware gangs now exploiting critical TeamCity flaw

Sep 24, 2026 // 23:38

​The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies on Wednesday that ransomware gangs are now also exploiting a critical JetBrains TeamCity vulnerability […]

Hackers now exploit critical Roundcube flaw in code injection attacks

Sep 24, 2026 // 23:37

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. Roundcube Webmail […]

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

Sep 23, 2026 // 14:47

Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good. Point one at a realistic target and […]

Critical ScreenConnect flaw now actively exploited in attacks

Sep 16, 2026 // 14:16

Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). ConnectWise shared temporary mitigation measures […]

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

Sep 15, 2026 // 15:16

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability […]

CISA: Hackers now exploit max severity GitLab flaw in attacks

Sep 14, 2026 // 11:57

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks. GitLab’s DevSecOps platform is used […]

1 2 3 … 8 Next