Technology ❯ Cybersecurity ❯ Threats

Exploits

Remote Code Execution Zero-Day Vulnerabilities Proof of Concept Remote Attacks Privilege Escalation CVE Vulnerabilities Malware Command Injection Code Injection Zero-Day Exploits

Cisco Fixes Critical Secure Workload API Flaw That Can Grant Site Admin Access

The patch closes an internal REST API validation gap that could let unauthenticated requests gain elevated control across tenants.

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

Drupal Issues Emergency Patch for PostgreSQL SQL Injection Flaw

Researcher Releases 'MiniPlasma' Exploit That Gains SYSTEM Access on Fully Patched Windows

Google Rolls Out Chrome 148 to Fix 79 Flaws, Including 14 Critical

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

Microsoft Says Exchange OWA Flaw Is Under Active Attack, Rolls Out Auto Mitigation

Dirty Frag Linux Flaws Enable Local Root as Vendors Rush Fixes

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Forescout Finds 22 Flaws in Lantronix, Silex Serial-to-IP Converters as Vendors Issue Patches

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

Anthropic Stands By MCP STDIO Design That Researchers Say Enables Command Execution

Fortinet Releases Fixes for Critical FortiSandbox Flaws That Need No Login

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

Adobe Issues Emergency Patch for Acrobat/Reader Zero-Day Exploited via Malicious PDFs

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Google Rushes Chrome 146 Update to Fix WebGPU Zero-Day Exploited in the Wild

Cisco Releases Fixes for Critical IMC and SSM On-Prem Flaws Allowing Remote Admin and Root Access