Stories tagged “Vulnerability.”
30 stories
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. Kemp LoadMaster is a popular Application Delivery Controller (ADC) and server load balancer us…
New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the techniques can capture passwords, take over third-party …
A maximum-severity zero-day vulnerability in Metabase's business intelligence software is being actively exploited, allowing unauthenticated remote attackers to gain administrator access.
N-able has released a second hotfix for its N-central RMM product to address ongoing exploitation of a security flaw, CVE-2026-18577, which attackers are leveraging to gain administrative access and establish persistence on managed systems.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.
WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management system. The flaw can be chained into PHP code execution on the server when a logged-in administrator interacts with …
A use-after-free bug in Linux's SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath. The flaw has existed since 2008.
A new attack class called NatJack has been disclosed by security researcher Malcolm Stagg. It manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables.
A researcher demonstrated that malware can use a Windows Hello for Business key to authenticate to Microsoft Entra ID, allowing an attacker to establish longer-term cloud access.
A new Linux vulnerability, Zapscape, has been discovered in the KVM x86 code, allowing guest-to-host escape and local privilege escalation (LPE) on certain Linux distributions.
A new Linux kernel vulnerability, tracked as CVE-2026-64561, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The flaw affects KVM/x86's shadow memory management unit (MMU) and req…
Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review.
A vulnerability in Linux's Speculative Return Stack Overflow (SRSO) mitigation affecting AMD Zen 1 through Zen 4 processors has been patched. The Safe RET Interrupt Vulnerability could lead to the SRSO mitigation being weakened and/or information disclosure.
The Linux kernel has a security vulnerability that allows legacy I/O and memory interfaces to remain open in lockdown mode, allowing root users to write arbitrary I/O ports and map legacy I/O and memory spaces.
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, …
Johnson Controls Inc. TL280 Vulnerability Exposes Sensitive Information
A vulnerability in Johnson Controls Inc. TL280 firmware allows attackers to access sensitive information. The affected versions are TL280 <5.63. Users are advised to apply firmware update 5.63 and implement defensive measures.
A vulnerability in the CryptoJS library's random number generator has been identified as the cause of $5.7 million in losses from five crypto wallet apps. The issue affects recovery phrase generation and has been fixed in some apps, but users are advised to create new phr…
Cybersecurity researchers have discovered a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP address. The issue is rooted in three features in Apple's WebKit: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport.
Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source code to the database, let Oracle compile it into …
A volunteer group of Bitcoin developers used AI tools to find 4,962 security vulnerabilities, including 85 critical bugs, across 390 projects in just 24 hours, overwhelming project maintainers.
Apple's iCloud Private Relay feature is designed to obscure web traffic, but a new vulnerability means not all browsing is private. Security researchers discovered that even with iCloud Private Relay active, the IP address of a device or home network can be transmitted, w…
A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 million Bitcoin theft to trick users into installing ScreenConnect remote access software.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability is CVE-2026-63077, a JetBrains TeamCity Deserialization of Untrusted Data Vulnerability.
A memory corruption flaw in the Linux kernel's Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds.
At least 15 attackers exploited the Coldcard vulnerability, which may have been avoided with just $2 worth of AI hardening. The estimated losses from the Coldcard exploit have grown to $100 million across three confirmed attack waves.
Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository after a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent.
cPanel has patched a critical flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity.
N-able warns customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. The company has released a hotfix to address the security issue.
The INC Ransomware operation has emerged as the dominant threat actor exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. Fixes for the vulnerability pair were released by SonicWall in mid-July 2026.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability, CVE-2026-18577, is an authentication bypass using an alternate path or channel in N-able N-central.