Technology ❯ Cybersecurity

Mitigation Strategies

Patching Vulnerability Management Vendor Instructions Access Control Patch Management Firmware Updates Updates Emergency Mitigation Service System Updates Vulnerability Patching

Ghost CMS Flaw Used to Poison More Than 700 Websites With ClickFix Malware

By stealing admin API keys through an SQL injection, attackers can inject cloaked scripts that trick visitors into running Windows commands.

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

Microsoft Says Exchange OWA Flaw Is Under Active Attack, Rolls Out Auto Mitigation

Fragnesia Linux Kernel Flaw Gives Local Users Root Access

Dirty Frag Linux Flaws Enable Local Root as Vendors Rush Fixes

Dirty Frag Gives Local Users Root on Linux as Only One of Two Flaws Is Patched

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

Mac ClickFix Campaign Shifts to Script Editor via Applescript Links

OpenClaw Fixes 'ClawJacked' Flaw That Let Websites Hijack Local AI Agents

Juniper Patches Critical PTX Router Flaw Enabling Remote Root Access

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

Microsoft Issues Emergency Patches for Exploited Office Zero-Day CVE-2026-21509

Cisco Patches Actively Exploited RCE in Unified Communications and Webex Calling

RondoDox Botnet Uses React2Shell to Hijack Next.js Servers and IoT Devices

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

SonicWall Patches Actively Exploited SMA1000 Zero-Day, Urges Immediate Hotfixes

Google Links More State Groups to React2Shell as Wallet-Draining Attacks Spread

UK Cyber Agency: Prompt Injection Is a Persistent LLM Weakness, Not a Fixable Bug

JPCERT Confirms Active Exploitation of Array Networks AG Gateways via DesktopDirect Flaw