#vulnerability


Zoom warns of critical account takeover vulnerability

Jul 15, 2026 // 23:17

Zoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that could be exploited by an unauthenticated party to […]

We built a vulnerability vending machine: AI tokens in, zero-days out

Jul 15, 2026 // 17:16

AI is changing how vulnerability research gets done, but most of the conversation is still theoretical: what a model might eventually be capable of, rather […]

Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets

Jul 10, 2026 // 16:46

Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in how some wallet software generated […]

Microsoft patches RoguePlanet Defender zero-day vulnerability

Jul 9, 2026 // 08:56

Microsoft has released a security patch to address a Defender zero-day vulnerability known as “RoguePlanet,” disclosed after the June 2026 Patch Tuesday. The flaw (tracked […]

Ubiquiti warns of new max severity UniFi OS vulnerability

Jul 8, 2026 // 11:17

Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw tracked as CVE-2026-50746 that can be exploited in […]

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Jul 2, 2026 // 15:27

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels […]

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

Jun 15, 2026 // 22:49

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at […]

AI Broke Vulnerability Management. That’s Why CISOs Are Moving Budget to BAS.

Jun 11, 2026 // 14:36

For thirty years, vulnerability management ran on a buffer: the months between when a vulnerability was found and when someone could figure out how to […]

Max severity Ivanti Sentry vulnerability now exploited in attacks

Jun 11, 2026 // 10:17

Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways. […]

New Veeam vulnerability exposes backup servers to RCE attacks

Jun 9, 2026 // 17:37

Veeam has released security updates to patch a critical Backup & Replication security flaw that can be exploited to gain remote code execution (RCE) on […]

Previous 1 2 3 4 … 8 Next