Vulnerabilities

Ivanti released emergency patches for two critical zero-day vulnerabilities in Endpoint Manager Mobile that are being exploited in-the-wild.

CRIL uncovers ShadowHS, a fileless Linux framework using weaponized hackshell for stealthy post-exploitation and operator-driven control.

Google discovered widespread exploitation of a critical WinRAR vulnerability six months after the vendor patched it.

Threat actors exploit CVE-2025-55182 (React2Shell) to achieve remote code execution and deploy miners, botnets, and backdoors worldwide.

CVE-2024-37079 in VMware vCenter Server allows remote code execution. Exploitation is active, patch affected systems urgently.

Microsoft has released an emergency fix for an actively-exploited zero-day vulnerability affecting Microsoft Office. The vulnerability, CVE-2026-21509, is labeled a...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five enterprise software flaws to its Known Exploited Vulnerabilities (KEV)...

GitLab patch updates 18.8.2, 18.7.2, and 18.6.4 resolve high-severity vulnerabilities impacting Community Edition and Enterprise Edition systems.

Network administrators worldwide are scrambling this morning following credible reports that the critical Fortinet Single Sign-On (SSO) vulnerability, tracked as...

A severe vulnerability in an ACF addon plugin enables unauthorized admin access, exposing thousands of WordPress sites to complete takeover.