Technology ❯ Cybersecurity ❯ Threats

Exploits

Remote Code Execution Zero-Day Vulnerabilities Proof of Concept Privilege Escalation Remote Attacks CVE Vulnerabilities Malware Zero-Day Exploits Command Injection CVE-2025-14733

3 ARTICLES

2w ago

Critical WP Maps Pro Flaw Lets Attackers Create WordPress Admin Accounts

A support 'temporary access' endpoint used a publicly exposed nonce that let unauthenticated actors gain passwordless admin access on unpatched sites.

10 ARTICLES

2w ago

Microsoft Threatens Legal Action After Public Release of Six Windows Zero‑Days

3 ARTICLES

2w ago

Microsoft Patches High-Severity SharePoint Deserialization RCE

9 ARTICLES

3w ago

Microsoft Issues Emergency Patches for Two Actively Exploited Defender Zero‑Days

3 ARTICLES

3w ago

Researcher Releases 'MiniPlasma' Exploit That Gains SYSTEM Access on Fully Patched Windows

3 ARTICLES

4w ago

Google Rolls Out Chrome 148 to Fix 79 Flaws, Including 14 Critical

8 ARTICLES

4w ago

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

6 ARTICLES

4w ago

Microsoft Says Exchange OWA Flaw Is Under Active Attack, Rolls Out Auto Mitigation

7 ARTICLES

4w ago

Dirty Frag Linux Flaws Enable Local Root as Vendors Rush Fixes

15 ARTICLES

last mo.

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

4 ARTICLES

last mo.

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

3 ARTICLES

last mo.

Forescout Finds 22 Flaws in Lantronix, Silex Serial-to-IP Converters as Vendors Issue Patches

6 ARTICLES

last mo.

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

8 ARTICLES

last mo.

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

4 ARTICLES

2mo ago

Anthropic Stands By MCP STDIO Design That Researchers Say Enables Command Execution

3 ARTICLES

2mo ago

Fortinet Releases Fixes for Critical FortiSandbox Flaws That Need No Login

23 ARTICLES

2mo ago

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

Exploits

Critical WP Maps Pro Flaw Lets Attackers Create WordPress Admin Accounts

Microsoft Threatens Legal Action After Public Release of Six Windows Zero‑Days

Microsoft Patches High-Severity SharePoint Deserialization RCE

Microsoft Issues Emergency Patches for Two Actively Exploited Defender Zero‑Days

Cisco Fixes Critical Secure Workload API Flaw That Can Grant Site Admin Access

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

Drupal Issues Emergency Patch for PostgreSQL SQL Injection Flaw

Researcher Releases 'MiniPlasma' Exploit That Gains SYSTEM Access on Fully Patched Windows

Google Rolls Out Chrome 148 to Fix 79 Flaws, Including 14 Critical

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

Never miss stories about

Exploits

Microsoft Says Exchange OWA Flaw Is Under Active Attack, Rolls Out Auto Mitigation

Dirty Frag Linux Flaws Enable Local Root as Vendors Rush Fixes

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Forescout Finds 22 Flaws in Lantronix, Silex Serial-to-IP Converters as Vendors Issue Patches

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

Anthropic Stands By MCP STDIO Design That Researchers Say Enables Command Execution

Fortinet Releases Fixes for Critical FortiSandbox Flaws That Need No Login

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

Never miss stories about

Exploits