Vulnerabilities

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities

Android, exploited, Mobile & Wireless, mobile security, Vulnerabilities, Zero-Day /

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities 2026-06-02 at 18:01 By Eduard Kovacs Google says the Android vulnerability CVE-2025-48595 has been exploited in limited, targeted attacks. The post Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities Read More »

Why “Private” Hosting Isn’t the Same as Secure Hosting

Perspectives, Vulnerabilities /

Why “Private” Hosting Isn’t the Same as Secure Hosting 2026-06-02 at 17:32 By For many organizations, the move to virtual private server (VPS) hosting feels like a natural security upgrade. After all, the word private suggests isolation, control, and protection; especially compared to shared hosting environments. This article is an excerpt from LevelBlue Blog View […]

Why “Private” Hosting Isn’t the Same as Secure Hosting Read More »

Oracle WebLogic Vulnerability Exploited in the Wild

CISA KEV, exploited, Oracle, Oracle WebLogic, Vulnerabilities, vulnerability, WebLogic /

Oracle WebLogic Vulnerability Exploited in the Wild 2026-06-02 at 15:46 By Eduard Kovacs The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers. The post Oracle WebLogic Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Oracle WebLogic Vulnerability Exploited in the Wild Read More »

Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches

Endpoint Security, HP, VoIP, Vulnerabilities, vulnerability /

Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches 2026-06-02 at 15:25 By Ionut Arghire A stack-based buffer overflow bug can be exploited for remote code execution on a vulnerable device. The post Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches Read More »

Oracle’s First Monthly Patches Resolve 77 Vulnerabilities

Oracle, Oracle CSPU, patches, Vulnerabilities, vulnerability /

Oracle’s First Monthly Patches Resolve 77 Vulnerabilities 2026-06-02 at 10:58 By Ionut Arghire Oracle’s monthly Critical Security Patch Update (CSPU) rollouts are meant to deliver critical fixes faster. The post Oracle’s First Monthly Patches Resolve 77 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Oracle’s First Monthly Patches Resolve 77 Vulnerabilities Read More »

WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites

Vulnerabilities /

WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites 2026-06-01 at 22:05 By Ionut Arghire The security defect (CVE-2026-8732) allows unauthenticated attackers to create administrative accounts on the affected installations. The post WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

WP Maps Pro Vulnerability Exploited to Take Over WordPress Sites Read More »

Critical Windows Netlogon Vulnerability in Attackers’ Crosshairs

Netlogon, Vulnerabilities, vulnerability /

Critical Windows Netlogon Vulnerability in Attackers’ Crosshairs 2026-06-01 at 20:16 By Ionut Arghire Organizations are advised to patch CVE-2026-41089 as soon as possible, given its severity, the potential ongoing exploitation. The post Critical Windows Netlogon Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Windows Netlogon Vulnerability in Attackers’ Crosshairs Read More »

19-Year-Old Linux Kernel Vulnerability Exposes Systems to Root Access

CIFSwitch, Featured, Linux, Vulnerabilities /

19-Year-Old Linux Kernel Vulnerability Exposes Systems to Root Access 2026-06-01 at 17:37 By Ionut Arghire Proof-of-concept (PoC) exploit code has been released for the CIFSwitch flaw, which allows low-privileged users to escalate to root on vulnerable Linux systems. The post 19-Year-Old Linux Kernel Vulnerability Exposes Systems to Root Access appeared first on SecurityWeek. This article […]

19-Year-Old Linux Kernel Vulnerability Exposes Systems to Root Access Read More »

Recent Palo Alto Networks Vulnerability Exploited for Weeks

CVE-2026-0257, Palo Alto Networks, Vulnerabilities, vulnerability /

Recent Palo Alto Networks Vulnerability Exploited for Weeks 2026-06-01 at 17:37 By Ionut Arghire Hackers began exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS, four days after public disclosure. The post Recent Palo Alto Networks Vulnerability Exploited for Weeks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Recent Palo Alto Networks Vulnerability Exploited for Weeks Read More »

Exploit Code Published for Critical Flowise RCE Vulnerability

CVE-2026-40933, exploit, Featured, Vulnerabilities, vulnerability /

Exploit Code Published for Critical Flowise RCE Vulnerability 2026-05-30 at 18:55 By Ionut Arghire The one-click vulnerability allows attackers to execute arbitrary code on self-hosted Flowise servers by tricking users into importing a malicious chatflow. The post Exploit Code Published for Critical Flowise RCE Vulnerability appeared first on SecurityWeek. This article is an excerpt from […]

Exploit Code Published for Critical Flowise RCE Vulnerability Read More »

Gogs Zero-Day Exposes Servers to Remote Code Execution

Vulnerabilities /

Gogs Zero-Day Exposes Servers to Remote Code Execution 2026-05-29 at 18:31 By Ionut Arghire The critical-severity issue, assigned a CVSS score of 9.4, is an argument injection flaw that can be exploited by authenticated attackers via pull requests with malicious branch names. The post Gogs Zero-Day Exposes Servers to Remote Code Execution appeared first on […]

Gogs Zero-Day Exposes Servers to Remote Code Execution Read More »

IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under “Project Lightwell”

IBM, open source, Red Hat, Vulnerabilities /

IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under “Project Lightwell” 2026-05-28 at 17:54 By SecurityWeek News Project Lightwell is designed to fix vulnerabilities without breaking what is already in production. The post IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under “Project Lightwell” appeared […]

IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under “Project Lightwell” Read More »

Sapphire Sleet Targets macOS in Multi-Stage Intrusion Campaign

Emerging Threats, Threat Intelligence, Vulnerabilities /

Sapphire Sleet Targets macOS in Multi-Stage Intrusion Campaign 2026-05-28 at 17:00 By Maor Gabay We recently observed a multi-stage macOS intrusion campaign conducted by the North Korean state-sponsored threat group Sapphire Sleet (also tracked as BlueNoroff/UNC1069). This article is an excerpt from LevelBlue SpiderLabs Blog View Original Source

Sapphire Sleet Targets macOS in Multi-Stage Intrusion Campaign Read More »

Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks

CVE-2026-35616, FortiClient, Network Security, Vulnerabilities /

Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks 2026-05-28 at 15:55 By Ionut Arghire Fortinet rolled out hotfixes for the security defect in April, warning that it had been exploited in the wild as a zero-day and urging immediate patching. The post Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks appeared first on SecurityWeek. This […]

Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks Read More »

Vulnerability in Popular Conference Software Granted Attackers a 100% Talk Acceptance Rate

Pretalx, Vulnerabilities, vulnerability /

Vulnerability in Popular Conference Software Granted Attackers a 100% Talk Acceptance Rate 2026-05-27 at 17:30 By Eduard Kovacs Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx. The post Vulnerability in Popular Conference Software Granted Attackers a 100% Talk Acceptance Rate appeared first on SecurityWeek. This article is an […]

Vulnerability in Popular Conference Software Granted Attackers a 100% Talk Acceptance Rate Read More »

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day

CISA KEV, cPanel, exploited, LiteSpeed, plugin, Vulnerabilities, Zero-Day /

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day 2026-05-27 at 09:56 By Ionut Arghire Resolved last week, the vulnerability was exploited in the wild as a zero-day to execute scripts with root privileges. The post CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day appeared first on SecurityWeek. This article is an […]

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day Read More »

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment

exploited, KnowledgeDeliver, Vulnerabilities, vulnerability, Zero-Day /

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment 2026-05-26 at 17:32 By Ionut Arghire Hardcoded machineKey values in a configuration file enabled ViewState deserialization attacks leading to remote code execution. The post Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment Read More »

Open Source DockSec Uses AI to Cut Through Vulnerability Noise in Docker Images

Docker, Vulnerabilities, vulnerability /

Open Source DockSec Uses AI to Cut Through Vulnerability Noise in Docker Images 2026-05-26 at 13:56 By Mike Lennon DockSec, an OWASP incubator project, correlates findings from multiple container security scanners and uses AI to generate plain-English remediation guidance and exact Dockerfile fixes. The post Open Source DockSec Uses AI to Cut Through Vulnerability Noise […]

Open Source DockSec Uses AI to Cut Through Vulnerability Noise in Docker Images Read More »

Scroll to Top