Vulnerabilities

Splunk, Zoom Patch Critical Vulnerabilities

Splunk, Zoom Patch Critical Vulnerabilities 2026-07-16 at 13:54 By Ionut Arghire The flaws could allow attackers to access credentials and data, take over accounts, and escalate their privileges. The post Splunk, Zoom Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Splunk, Zoom Patch Critical Vulnerabilities Read More »

F5 Patches Multiple NGINX, BIG-IP Vulnerabilities

F5 Patches Multiple NGINX, BIG-IP Vulnerabilities 2026-07-16 at 12:20 By Ionut Arghire Attackers could exploit the bugs to modify configurations, terminate or restart processes, cross security boundaries, leak memory, and execute code. The post F5 Patches Multiple NGINX, BIG-IP Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

F5 Patches Multiple NGINX, BIG-IP Vulnerabilities Read More »

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day 

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day  2026-07-16 at 09:48 By Ionut Arghire The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability. The post Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day  Read More »

Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities

Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities 2026-07-16 at 09:08 By Eduard Kovacs The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products. The post Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities Read More »

Unpatched Cursor Vulnerability Exposes Users to Code Execution

Unpatched Cursor Vulnerability Exposes Users to Code Execution 2026-07-15 at 17:37 By Ionut Arghire An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically. The post Unpatched Cursor Vulnerability Exposes Users to Code Execution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Unpatched Cursor Vulnerability Exposes Users to Code Execution Read More »

CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities

CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities 2026-07-15 at 17:07 By Ionut Arghire Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days. The post CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities Read More »

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow 2026-07-15 at 14:02 By Ionut Arghire A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code. The post Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow Read More »

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption 2026-07-15 at 12:48 By Ionut Arghire The company has rolled out a fix and is restoring access for Storage Zones Controller customers who apply it. The post Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption Read More »

Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates

Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates 2026-07-15 at 10:24 By Ionut Arghire Public exploit code targeting the Firefox flaws exists, but no in-the-wild exploitation has been observed. The post Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates Read More »

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits 2026-07-15 at 08:19 By Eduard Kovacs SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution. The post SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits Read More »

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days 2026-07-14 at 21:50 By Ionut Arghire Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed. The post Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days appeared first on SecurityWeek. This article is an excerpt […]

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days Read More »

Adobe Patches Critical ColdFusion Vulnerabilities

Adobe Patches Critical ColdFusion Vulnerabilities 2026-07-14 at 20:06 By Ionut Arghire The ColdFusion security defects could allow attackers to execute arbitrary code or elevate their privileges. The post Adobe Patches Critical ColdFusion Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches Critical ColdFusion Vulnerabilities Read More »

Your Phone Number Is More Valuable to Criminals Than You Think

Your Phone Number Is More Valuable to Criminals Than You Think 2026-07-14 at 17:00 By Karl Sigler When people think about cybersecurity, they usually think about protecting passwords, laptops, or email accounts. Phone numbers don’t make the list very often. This article is an excerpt from LevelBlue Blog View Original Source

Your Phone Number Is More Valuable to Criminals Than You Think Read More »

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer 2026-07-14 at 16:55 By Eduard Kovacs The flaws can be exploited for authentication bypass, remote code execution, privilege escalation, and directory traversal. The post 7 Severe Vulnerabilities Patched in VMware Avi Load Balancer appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer Read More »

SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud

SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud 2026-07-14 at 14:17 By Ionut Arghire The flaws could allow attackers to access and modify data, and cause system unavailability and request-response desynchronization. The post SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud Read More »

RabbitMQ Vulnerability Threatens Enterprise Systems

RabbitMQ Vulnerability Threatens Enterprise Systems 2026-07-13 at 15:00 By Ionut Arghire Unauthenticated attackers could obtain the broker’s confidential OAuth client secret, allowing them to take control of the broker. The post RabbitMQ Vulnerability Threatens Enterprise Systems appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

RabbitMQ Vulnerability Threatens Enterprise Systems Read More »

Zimbra Patches Critical Code Execution Vulnerability

Zimbra Patches Critical Code Execution Vulnerability 2026-07-13 at 13:03 By Ionut Arghire The flaw results in malicious code embedded in crafted emails being executed when the emails are opened. The post Zimbra Patches Critical Code Execution Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Zimbra Patches Critical Code Execution Vulnerability Read More »

Organizations Warned of Exploited Joomla Extension Vulnerabilities

Organizations Warned of Exploited Joomla Extension Vulnerabilities 2026-07-13 at 12:08 By Ionut Arghire Threat actors have been targeting Balbooa Forms and iCagenda Joomla extension flaws for remote code execution. The post Organizations Warned of Exploited Joomla Extension Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Organizations Warned of Exploited Joomla Extension Vulnerabilities Read More »

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns 2026-07-13 at 11:20 By Ionut Arghire The company notified customers to manually shut down their servers while it is investigating a credible threat. The post Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns appeared first on SecurityWeek. This article is an excerpt from […]

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns Read More »

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor 2026-07-10 at 23:49 By Nathaniel Morales The LevelBlue Managed Threat Research team investigated a security alert in a customer environment involving a malicious ZIP file containing a Windows shortcut (.lnk) used for initial execution. When triggered, the LNK file executes a […]

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor Read More »

Scroll to Top