Technology ❯ Information Security

Vulnerability Management

Exploit Development Patch Management National Vulnerability Database Bug Bounty Programs Patching CISA Incident Response Phishing-resistant MFA CVE Tracking Reporting Practices CVE Public Awareness Known Exploited Vulnerabilities Security Patches Exploitation Detection CVE Identifiers

Ledger Says It Patched Ethereum App Bug Before OneKey Reproduced It

Ledger says an app update followed by a Secure SDK patch stops a race condition that could let a compromised host swap transactions.

ShieldBreak PoC Elevates Privileges via Microsoft Defender

RefluXFS Lets Local Users Overwrite Root Files on Many Default RHEL Installs

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Six U‑Boot Flaws Let Malicious Boot Images Crash Devices or Run Code

Flowise CVSS 10 Flaw Now Exploited in the Wild as 12,000+ Instances Remain Exposed

ServiceNow Discloses and Patches Critical AI Platform Flaw Allowing User Impersonation

U.S. and Partners Issue Updated Akira Ransomware Alert as FBI Puts Group in Top Five

SolarWinds Ships Third Hotfix for Critical Web Help Desk RCE Bypass

Attackers Exploit ActiveMQ Flaw, Deploy DripDropper, Then Patch the Hole

Google Project Zero Launches Weekly Early Vulnerability Alerts