Technology ❯ Cybersecurity ❯ Incident Response

Vulnerability Management

Patch Management Zero-Day Exploits Security Updates Threat Detection Threat Intelligence CISA Recommendations Hotfix Deployment Security Patches Public Exploits Firmware Updates

Attackers Exploiting Critical Langflow Flaw to Steal OpenAI and AWS Keys

VulnCheck says the unauthenticated bug lets attackers run Python as root to probe systems and harvest cloud and AI credentials.

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

Typosquatted Rust Crate Delivered Build‑Time Backdoor

Microsoft Confirms Entra ID Deserialization Flaw CVE-2026-69836 Was Exploited

Critical Adobe Commerce Flaw Lets Attackers Hijack Customer Accounts

Paperclip Flaws Let Attackers Execute Commands on Servers and Developer Machines

Adobe Extension Flaw Let Websites Read WhatsApp Web Data

SonicWall SMA1000 Zero-Days Exploited Before Patch, Custom Malware Deployed

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Critical Joomla Extension Flaws Exploited for Remote Code Execution

Undocumented Backdoor Found in Multiple Tenda Router Firmware

FortiBleed Harvested More Than 100 Million FortiGate Credentials, Researchers Say

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Veeam Patch Closes Critical RCE That Threatened Backup Servers

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

Critical Zero-Day in Gogs Lets Authenticated Users Run Remote Code

Nine-Year Linux Kernel Flaw Lets Local Users Steal SSH Keys and Gain Root

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Google Patches Antigravity Flaw That Let Prompt Injection Break the Sandbox