Vulnerabilities

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot

CISA, Government, Risk Management, Vulnerabilities, vulnerability, vulnerability management /

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot 2026-09-17 at 17:28 By Eduard Kovacs The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk. The post CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot Read More »

ISC Patches 14 Vulnerabilities in BIND 9 Security Update

BIND, DNS, patch, Vulnerabilities, vulnerability /

ISC Patches 14 Vulnerabilities in BIND 9 Security Update 2026-09-17 at 15:39 By Ionut Arghire Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process. The post ISC Patches 14 Vulnerabilities in BIND 9 Security Update appeared first on SecurityWeek. This article is an excerpt from […]

ISC Patches 14 Vulnerabilities in BIND 9 Security Update Read More »

Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard

Cisco, patch, Vulnerabilities, vulnerability /

Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard 2026-09-17 at 15:17 By Ionut Arghire The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution.   The post Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard appeared first on SecurityWeek. This article is an excerpt […]

Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard Read More »

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day

Cisco, Cisco ISE, exploited, Featured, Vulnerabilities, vulnerability, Zero-Day /

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day 2026-09-17 at 09:19 By Ionut Arghire Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests. The post Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day Read More »

One Patch Behind: Nightmare-Eclipse’s ShieldCrash and the Defender Bypass That Won’t Stay Fixed

Emerging Threats, Microsoft Security, Vulnerabilities /

One Patch Behind: Nightmare-Eclipse’s ShieldCrash and the Defender Bypass That Won’t Stay Fixed 2026-09-16 at 16:35 By Serhii Melnyk and Timmy Lister In our previous blog, we analyzed four proofs of concept (PoCs) from the leak persona Nightmare-Eclipse that targeted Kaspersky, Avast, NVIDIA, and CrowdStrike, respectively. This article is an excerpt from LevelBlue SpiderLabs Blog […]

One Patch Behind: Nightmare-Eclipse’s ShieldCrash and the Defender Bypass That Won’t Stay Fixed Read More »

Pixel Modem Zero-Day Exploited in Targeted Attacks

Android, exploited, Mobile & Wireless, Pixel, Vulnerabilities, Zero-Day /

Pixel Modem Zero-Day Exploited in Targeted Attacks 2026-09-16 at 16:10 By Eduard Kovacs Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15. The post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Pixel Modem Zero-Day Exploited in Targeted Attacks Read More »

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

calendar, plugin vulnerability, Vulnerabilities, vulnerability, WordPress /

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover 2026-09-16 at 14:32 By Ionut Arghire Vulnerabilities in The Events Calendar can provide attackers with remote code execution capabilities. The post Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover Read More »

Chrome, Firefox Updates Patch 115 Vulnerabilities

Chrome, Firefox, patch, Vulnerabilities, vulnerability /

Chrome, Firefox Updates Patch 115 Vulnerabilities 2026-09-16 at 13:28 By Ionut Arghire Google resolved 42 security defects in Chrome, and Mozilla fixed 73 bugs in Firefox. The post Chrome, Firefox Updates Patch 115 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome, Firefox Updates Patch 115 Vulnerabilities Read More »

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

exploited, Vulnerabilities, vulnerability, WSO2 /

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability 2026-09-16 at 11:39 By Eduard Kovacs The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data. The post Enterprises Warned of Attacks Exploiting WSO2 Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability Read More »

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update

CSPU, Featured, Oracle, patches, Vulnerabilities, vulnerability /

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update 2026-09-16 at 11:06 By Ionut Arghire The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws. The post Oracle Patches 800+ Vulnerabilities in September 2026 Security Update appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update Read More »

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws

Linux, sandbox, Vulnerabilities /

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws 2026-09-15 at 19:00 By Kevin Townsend AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage. The post $1 Million Sandbox Challenge Uncovers Linux Kernel Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws Read More »

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases 

apple, Featured, iOS, iOS 27, macOS, macOS Golden Gate 27, patches, Vulnerabilities, vulnerability /

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases  2026-09-15 at 14:06 By Ionut Arghire The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks. The post Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases  appeared first on […]

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases  Read More »

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

Cisco, email security, exploited, Featured, Secure Email Gateway, Vulnerabilities, vulnerability, Zero-Day /

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation 2026-09-15 at 08:18 By Eduard Kovacs An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges. The post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek. This article is an […]

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation Read More »

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution

China, China APT, exploit, exploited, Nation-State, Sogou, Tencent, Vulnerabilities, vulnerability /

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution 2026-09-14 at 14:51 By Ionut Arghire The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely. The post Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution appeared first on SecurityWeek. This article is an excerpt from […]

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution Read More »

Three JFrog Artifactory Flaws Exploited for Backdoor Deployment

backdoor, exploited, JFrog Artifactory, Vulnerabilities, vulnerability /

Three JFrog Artifactory Flaws Exploited for Backdoor Deployment 2026-09-14 at 12:27 By Ionut Arghire The vulnerabilities can allow attackers to bypass authentication and elevate their privileges to administrator. The post Three JFrog Artifactory Flaws Exploited for Backdoor Deployment appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Three JFrog Artifactory Flaws Exploited for Backdoor Deployment Read More »

ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks

exploited, Featured, patch, ScreenConnect, Vulnerabilities, vulnerability, worm /

ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks 2026-09-14 at 11:25 By Ionut Arghire The flaw allows attackers to send files and execute them without authorization through an active remote session. The post ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks Read More »

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

BlueMoon, Chrome, exploit kit, exploited, Vulnerabilities, Windows, Zero-Day /

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days 2026-09-12 at 14:10 By Ionut Arghire Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments. The post BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days Read More »

GitLab Vulnerability Exploited One Day After Disclosure

exploited, GitLab, Vulnerabilities, vulnerability /

GitLab Vulnerability Exploited One Day After Disclosure 2026-09-11 at 19:11 By Ionut Arghire The critical-severity path traversal flaw allows unauthenticated attackers to read arbitrary files from the GitLab server. The post GitLab Vulnerability Exploited One Day After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

GitLab Vulnerability Exploited One Day After Disclosure Read More »

Check Point Patches Critical VPN Vulnerabilities

Check Point, VPN, Vulnerabilities, vulnerability /

Check Point Patches Critical VPN Vulnerabilities 2026-09-11 at 14:10 By Ionut Arghire Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution. The post Check Point Patches Critical VPN Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Check Point Patches Critical VPN Vulnerabilities Read More »

Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation

Artificial Intelligence, Endpoint, Endpoint Security, Vulnerabilities, Webinar /

Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation 2026-09-10 at 16:30 By SecurityWeek News Join the webinar for a focused, 20-minute discussion on Frontier Pace Governance, an approach to balancing automation, policy, and business risk as IT operations accelerate. The post Webinar Today: Keep Pace With AI – A New Operating Model […]

Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation Read More »

Scroll to Top