Technology ❯ Cybersecurity ❯ Incident Response

Vulnerability Management

Patch Management Threat Detection Security Updates CISA Recommendations Firmware Updates Security Patches Exploitation Risks Container Security Citrix NetScaler Hotfix Deployment

Critical Joomla Extension Flaws Exploited for Remote Code Execution

They let unauthenticated attackers upload PHP web shells that give remote control of vulnerable sites and expose data to theft.

Undocumented Backdoor Found in Multiple Tenda Router Firmware

FortiBleed Harvested More Than 100 Million FortiGate Credentials, Researchers Say

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Veeam Patch Closes Critical RCE That Threatened Backup Servers

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

Critical Zero-Day in Gogs Lets Authenticated Users Run Remote Code

Nine-Year Linux Kernel Flaw Lets Local Users Steal SSH Keys and Gain Root

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Google Patches Antigravity Flaw That Let Prompt Injection Break the Sandbox

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

CPUID Confirms Brief Website Hijack That Served Malware via CPU-Z and HWMonitor Links

Hackers Exploit Critical Ninja Forms File Uploads Flaw to Seize WordPress Sites

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Citrix Patches Critical NetScaler Memory-Leak Flaw and Session Mixup Bug

Attackers Exploit Critical Langflow RCE Within 20 Hours of Disclosure

Qualys Discloses 'CrackArmor' Flaws in Linux AppArmor Exposing Root and Container Escapes

New Analysis Disputes Claims of Pre-Disclosure Telnet Blocking