Technology ❯ Cybersecurity

Software Vulnerabilities

Microsoft Products Remote Code Execution Zero-Day Exploits Microsoft Browser Security Linux Kernel Zero-Day Vulnerabilities Android Security Windows Security Microsoft SharePoint

macOS Screen Sharing Bug Exploited to Root Macs and Install Monero Miners

Public exploit code and a CISA upgrade to critical severity mean unpatched, internet‑exposed Macs are at high risk of rapid, automatable compromise.

GitLab Issues Emergency Patch for Critical Unauthenticated GraphQL Flaw

IBM Partners With OpenAI to Embed GPT‑5.6 in Its Consulting Platform

ShieldBreak PoC Elevates Privileges via Microsoft Defender

Critical Adobe Commerce Flaw Lets Attackers Hijack Customer Accounts

Zoom 'Zoomsday' Flaw Allowed Zero‑Click Device Takeover, Researchers Say

Microsoft Ships August Patch Tuesday Fixes for About 400 Vulnerabilities Including an Exploited Zero‑Day

Metabase Zero‑Day SQL Injection Exploited to Steal Customer Data

Claude Cowork Escapes Mac VM and Gains Host File Access

Adobe Extension Flaw Let Websites Read WhatsApp Web Data

RefluXFS Lets Local Users Overwrite Root Files on Many Default RHEL Installs

Race-Condition Bug in snap-confine Lets Local Users Gain Root on Ubuntu Desktop

Apple Says It Fixed Hide My Email Flaw That Could Unmask Users’ Real Addresses

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Zoom Patches Critical Windows Flaw That Could Allow Account Takeover

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

CISA Orders Emergency Patching After Active Exploitation of Adobe ColdFusion Flaw

Alibaba Bans Anthropic’s Claude Code for Workplace Use

AirDrop and Quick Share Flaws Can Let Nearby Attackers Crash Sharing on Billions of Devices

Squidbleed Lets Shared Squid Proxies Leak Other Users' HTTP Requests