Archive
All articles, newest first. Page 34.
Cisco ISE: Authenticated RCE in invokeScript With Root Escalation Path
CVE-2026-20147 enables authenticated remote code execution as the iseadminportal user on Cisco Identity Services Engine, with a docume…
NGINX WebDAV: Pre-Auth RCE Disclosed in ZDI-26-578
The ZDI-26-578 advisory reveals a critical RCE flaw in the NGINX HTTP DAV module. It is exploitable without authentication via an inte…
WordPress 7.0.3 Fixes Login XSS That Can Lead to RCE via Social Engineering
CVE-2026-64638 is a pre-authentication reflected XSS in the WordPress login screen, discovered by pwn.ai using AI-assisted systems. Ex…
NVIDIA Transformers4Rec Exposed to RCE: ML Checkpoint Turns Weapon
A deserialization flaw in NVIDIA's ML library enables remote code execution via malicious checkpoints. A documented discrepancy betwee…
dnsmasq: DNSSEC Bug Enables Unauthenticated Remote DoS
A vulnerability in dnsmasq's NSEC/NSEC3 DNSSEC record parsing allows remote denial-of-service attacks without authentication. The flaw…
Criminals Buy Expired Domains to Inherit Reputation and Traffic
A single threat actor spent nearly $7 million on over 10,000 expired domains, weaponizing their inherited trust signals for illegal st…
Beacon CRM: The Cloud Revealed as a Lock With the Key Left in the Door
Beacon CRM confirmed the total theft of its customer database covering 1,500+ UK charities. The cause: an AWS access key exposed in pu…
CVE-2026-65400: From Patch to Exploit in 4 Hours on macOS Screen Sharing
The Dutch NCSC confirms active exploitation of CVE-2026-65400: a pre-authentication bypass in macOS Screen Sharing granting root acces…
Keyv Compromised: Malware Exploits Signed Provenance and AI Agent Config Files
The August 4, 2026 supply chain attack on keyv delivered malware with valid SLSA attestations and OIDC provenance signatures. AI agent…
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The Greatness phishing-as-a-service toolkit has integrated device code phishing, abusing the OAuth 2.0 Device Authorization Grant to b…
CVE-2026-3854: One git push RCE in GitHub, 88% of GHES instances exposed
Wiz Research disclosed a critical RCE in GitHub Enterprise Server exploitable with a single git push command. GitHub patched GitHub.co…
SharePoint Authentication Bypass Under Active Exploitation Days After PoC Release
A critical vulnerability in Microsoft SharePoint's server-to-server authentication system, tracked as CVE-2026-55040 with a CVSS score…
CVE-2026-17583: Three Decades of DNA Evidence at Risk of Digital Tampering
A vulnerability in Thermo Fisher software allows undetected alteration of forensic DNA files. The patch does not validate 30 years of…
Lazarus Exploits Microsoft Zero-Day: Job Offers Turn Into Kernel Spyware
Check Point Research uncovers a new wave of Operation Dream Job featuring SecurityPDF and Troy. Lazarus leverages CVE-2026-68820 to de…
Lazarus Weaponizes Windows Zero-Day with Post-Quantum Encryption: Inside the C2 Traffic
The Lazarus Group has integrated the ML-KEM (Kyber) algorithm into the command-and-control channel of its MISTPEN infrastructure to de…
Metabase Zero-Day CVE-2026-72898: Active Exploitation, CVSS 10.0, Wide Blast Radius
A maximum-severity CVSS 10.0 zero-day struck Metabase on August 2, 2026. The attack, confirmed against the vendor's cloud infrastructu…
GeoServer Zero-Day Under Attack: The Regression Exposing Cracks in the Secure Development Lifecycle
Threat actors began probing a SQL injection zero-day in GeoServer within hours of its public disclosure on August 12, 2026. The vulner…
SonicWall Email Security: Local Privilege Escalation from CLI to Root via Command Injection
CVE-2026-66149 enables local privilege escalation in SonicWall Email Security. A patch is available, but the security perimeter remain…
ShinyHunters Exploited Oracle PeopleSoft Zero-Day for Two Weeks
CVE-2026-35273 hit over 100 notified organizations, 68% universities, via an SSRF-to-unauthenticated-RCE chain. CISA added it to the K…
Galaxy S25: A TIFF File Can Trigger Remote Code Execution
CVE-2026-21045 strikes the Galaxy S25's Quram library. Heap overflow in TIFF parsing carries a CVSS 8.4 score, with a three-month gap…
Flowise Removes Airtable and CSV Agents After Critical RCE (CVSS 9.4)
The low-code AI orchestration platform Flowise has entirely removed its AirtableAgent and CSVAgent components to address an unauthenti…
Passkey Bypass: Three Studies Shatter FIDO2's 'Anti-Phishing' Promise
On August 3, 2026, researchers from SpecterOps, Palo Alto Networks Unit 42, and independent researcher Dirk-jan Mollema published dist…
fTPM 2.0 Compromised: AMD and Intel Forced to Patch the Root of Trust
Two critical vulnerabilities in the shared fTPM 2.0 firmware used by AMD and Intel expose cryptographic secrets and enable key forgery…
Ransomware Q2: 1,140 Industrial Attacks, the New Perimeter Lies in IT Systems
Dragos' Q2 2026 report records 1,140 ransomware incidents against industrial organizations. The key finding: production halts without…