Vulnerabilities

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days

exploited, Microsoft, Patch Tuesday, Vulnerabilities, Zero-Day /

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days 2026-07-14 at 21:50 By Ionut Arghire Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed. The post Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days appeared first on SecurityWeek. This article is an excerpt […]

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days Read More »

Adobe Patches Critical ColdFusion Vulnerabilities

Adobe, Patch Tuesday, patches, Vulnerabilities, vulnerability /

Adobe Patches Critical ColdFusion Vulnerabilities 2026-07-14 at 20:06 By Ionut Arghire The ColdFusion security defects could allow attackers to execute arbitrary code or elevate their privileges. The post Adobe Patches Critical ColdFusion Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches Critical ColdFusion Vulnerabilities Read More »

Your Phone Number Is More Valuable to Criminals Than You Think

Tips & Tricks, Vulnerabilities /

Your Phone Number Is More Valuable to Criminals Than You Think 2026-07-14 at 17:00 By Karl Sigler When people think about cybersecurity, they usually think about protecting passwords, laptops, or email accounts. Phone numbers don’t make the list very often. This article is an excerpt from LevelBlue Blog View Original Source

Your Phone Number Is More Valuable to Criminals Than You Think Read More »

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer

Avi Load Balancer, VMWare, Vulnerabilities, vulnerability /

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer 2026-07-14 at 16:55 By Eduard Kovacs The flaws can be exploited for authentication bypass, remote code execution, privilege escalation, and directory traversal. The post 7 Severe Vulnerabilities Patched in VMware Avi Load Balancer appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer Read More »

SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud

patch, SAP, Vulnerabilities, vulnerability /

SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud 2026-07-14 at 14:17 By Ionut Arghire The flaws could allow attackers to access and modify data, and cause system unavailability and request-response desynchronization. The post SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud Read More »

RabbitMQ Vulnerability Threatens Enterprise Systems

Featured, RabbitMQ, Vulnerabilities, vulnerability /

RabbitMQ Vulnerability Threatens Enterprise Systems 2026-07-13 at 15:00 By Ionut Arghire Unauthenticated attackers could obtain the broker’s confidential OAuth client secret, allowing them to take control of the broker. The post RabbitMQ Vulnerability Threatens Enterprise Systems appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

RabbitMQ Vulnerability Threatens Enterprise Systems Read More »

Zimbra Patches Critical Code Execution Vulnerability

email security, patch, remote code execution, Vulnerabilities, vulnerability, Zimbra /

Zimbra Patches Critical Code Execution Vulnerability 2026-07-13 at 13:03 By Ionut Arghire The flaw results in malicious code embedded in crafted emails being executed when the emails are opened. The post Zimbra Patches Critical Code Execution Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Zimbra Patches Critical Code Execution Vulnerability Read More »

Organizations Warned of Exploited Joomla Extension Vulnerabilities

CISA KEV, exploited, Joomla, Vulnerabilities /

Organizations Warned of Exploited Joomla Extension Vulnerabilities 2026-07-13 at 12:08 By Ionut Arghire Threat actors have been targeting Balbooa Forms and iCagenda Joomla extension flaws for remote code execution. The post Organizations Warned of Exploited Joomla Extension Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Organizations Warned of Exploited Joomla Extension Vulnerabilities Read More »

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns

Progress Software, ShareFile, Vulnerabilities, vulnerability /

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns 2026-07-13 at 11:20 By Ionut Arghire The company notified customers to manually shut down their servers while it is investigating a credible threat. The post Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns appeared first on SecurityWeek. This article is an excerpt from […]

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns Read More »

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor

Emerging Threats, Threat Intelligence, Vulnerabilities /

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor 2026-07-10 at 23:49 By Nathaniel Morales The LevelBlue Managed Threat Research team investigated a security alert in a customer environment involving a malicious ZIP file containing a Windows shortcut (.lnk) used for initial execution. When triggered, the LNK file executes a […]

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor Read More »

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor

Emerging Threats, Threat Intelligence, Vulnerabilities /

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor 2026-07-09 at 16:52 By Nathaniel Morales The LevelBlue Managed Threat Research team investigated a security alert in a customer environment involving a malicious ZIP file containing a Windows shortcut (.lnk) used for initial execution. When triggered, the LNK file executes a […]

Hiding in the Chain: Multi-Stage LNK Attack Leveraging TON Blockchain to Deliver Node.JS Backdoor Read More »

Palo Alto Networks Patches 13 Vulnerabilities

Palo Alto Networks, patch, patches, Vulnerabilities, vulnerability /

Palo Alto Networks Patches 13 Vulnerabilities 2026-07-09 at 16:49 By Eduard Kovacs Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found in PAN-OS software. The post Palo Alto Networks Patches 13 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Palo Alto Networks Patches 13 Vulnerabilities Read More »

15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google

GhostLock, Google, kernel, Linux, Linux vulnerability, Vulnerabilities /

15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google 2026-07-09 at 14:52 By Ionut Arghire Affecting every major distribution since 2011, the Linux kernel vulnerability allows attackers to gain root access. The post 15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google Read More »

Microsoft Patches Defender ‘RoguePlanet’ Vulnerability

Chaotic Eclipse, Featured, Microsoft Defender, patch, RoguePlanet, Vulnerabilities, vulnerability /

Microsoft Patches Defender ‘RoguePlanet’ Vulnerability 2026-07-09 at 13:28 By Eduard Kovacs The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update. The post Microsoft Patches Defender ‘RoguePlanet’ Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches Defender ‘RoguePlanet’ Vulnerability Read More »

Chrome 150 Update Patches 27 Vulnerabilities

Chrome, patches, Vulnerabilities, vulnerability /

Chrome 150 Update Patches 27 Vulnerabilities 2026-07-09 at 10:27 By Ionut Arghire The security refresh resolves 13 use-after-free bugs, including two critical-severity flaws found by Google. The post Chrome 150 Update Patches 27 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome 150 Update Patches 27 Vulnerabilities Read More »

Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices

backdoor, router, Tenda, Vulnerabilities, vulnerability /

Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices 2026-07-09 at 08:00 By Ionut Arghire Tracked as CVE-2026-11405, the vulnerability allows unauthenticated attackers to access a device’s web management interface. The post Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices Read More »

CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws

CISA, ColdFusion, Featured, Joomla, Vulnerabilities /

CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws 2026-07-08 at 13:45 By Ionut Arghire Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA’s Known Exploited Vulnerabilities catalog, with federal agencies given until July 10 to patch. The post CISA Urges Immediate Patching of Exploited ColdFusion, […]

CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws Read More »

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

AI, Artificial Intelligence, GitHub, Vulnerabilities, vulnerability /

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection 2026-07-08 at 13:30 By Ionut Arghire Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication. The post Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection appeared first on SecurityWeek. This article […]

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection Read More »

Critical Gitea Flaw Under Active Exploitation, Researchers Warn

CVE-2026-20896, Vulnerabilities, vulnerability /

Critical Gitea Flaw Under Active Exploitation, Researchers Warn 2026-07-07 at 20:17 By Ionut Arghire Attackers are exploiting the critical Gitea vulnerability CVE-2026-20896 to bypass authentication with a single HTTP header and access vulnerable repositories and secrets. The post Critical Gitea Flaw Under Active Exploitation, Researchers Warn appeared first on SecurityWeek. This article is an excerpt […]

Critical Gitea Flaw Under Active Exploitation, Researchers Warn Read More »

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

ColdFusion, CVE-2026-48282, Vulnerabilities, vulnerability /

Critical Adobe ColdFusion Vulnerability Exploited in Attacks 2026-07-07 at 15:38 By Ionut Arghire Hackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10. The post Critical Adobe ColdFusion Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Adobe ColdFusion Vulnerability Exploited in Attacks Read More »

Scroll to Top