Vulnerabilities

Critical Flaws Discovered in Belgian eID Software Used by 2 Million People

belgium, Connective, eID, electronic signature, Featured, Nitro, Vulnerabilities, vulnerability /

Critical Flaws Discovered in Belgian eID Software Used by 2 Million People 2026-08-10 at 07:44 By Eduard Kovacs The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies. The post Critical Flaws Discovered in Belgian eID Software Used by 2 Million People appeared first on SecurityWeek. This article […]

Critical Flaws Discovered in Belgian eID Software Used by 2 Million People Read More »

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data

AI, Artificial Intelligence, Atlassian, data theft, Rovo, Vulnerabilities /

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data 2026-08-08 at 14:30 By Eduard Kovacs The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data. The post Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data appeared first on SecurityWeek. This article is an […]

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data Read More »

Beyond ‘Fake Updates’: From Application Store-Themed Phishing to Large-Scale Distribution of ScreenConnect

Emerging Threats, Vulnerabilities /

Beyond ‘Fake Updates’: From Application Store-Themed Phishing to Large-Scale Distribution of ScreenConnect 2026-08-07 at 16:10 By King Orande and Cris Tomboc The LevelBlue OpsCTI Team recently identified a large-scale phishing campaign leveraging a new social engineering method to deploy unauthorized ConnectWise ScreenConnect clients. Rather than relying on conventional phishing pages, the campaign recreates convincing software […]

Beyond ‘Fake Updates’: From Application Store-Themed Phishing to Large-Scale Distribution of ScreenConnect Read More »

Microsoft, Apple Release Fresh Security Updates

apple, Endpoint Security, Microsoft, patched, Vulnerabilities, vulnerability /

Microsoft, Apple Release Fresh Security Updates 2026-08-07 at 12:09 By Ionut Arghire Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass. The post Microsoft, Apple Release Fresh Security Updates appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft, Apple Release Fresh Security Updates Read More »

Critical Vulnerabilities Patched With Chrome 151 Update

Chrome, patch, Vulnerabilities, vulnerability /

Critical Vulnerabilities Patched With Chrome 151 Update 2026-08-07 at 09:56 By Ionut Arghire The browser refresh eliminates over two dozen memory safety bugs, including critical use-after-free flaws. The post Critical Vulnerabilities Patched With Chrome 151 Update appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Vulnerabilities Patched With Chrome 151 Update Read More »

Critical Paperclip Flaw Allowed Admin Access, Code Execution

AI, Artificial Intelligence, Paperclip, Vulnerabilities, vulnerability /

Critical Paperclip Flaw Allowed Admin Access, Code Execution 2026-08-06 at 14:09 By Ionut Arghire An attacker could self-register, sign in for board-level API access, and import a new company for code execution. The post Critical Paperclip Flaw Allowed Admin Access, Code Execution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Critical Paperclip Flaw Allowed Admin Access, Code Execution Read More »

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones 

Bixby, Black Hat, Featured, Mobile & Wireless, mobile security, Samsung, Vulnerabilities, vulnerability /

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones  2026-08-05 at 22:40 By Eduard Kovacs The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications. The post How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones  Read More »

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts

Google, Identity & Access, Pass-ta-key, passkey, passwordless, Vulnerabilities /

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts 2026-08-05 at 15:48 By Eduard Kovacs Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation. The post New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts Read More »

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities

Apache Tomcat, CISA KEV, exploited, Langflow, N-central, Vulnerabilities, vulnerability /

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities 2026-08-05 at 12:44 By Ionut Arghire The flaws can be exploited for remote code execution, authentication bypass, and EncryptInterceptor bypass. The post CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Warns of Exploited Langflow, N-central, and Tomcat Vulnerabilities Read More »

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

Network Security, Omada, router, TP-LINK, Vulnerabilities, vulnerability /

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover 2026-08-04 at 15:00 By Eduard Kovacs Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem. The post TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover Read More »

Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering

agent-to-agent, AI, Artificial Intelligence, Gemini, Vulnerabilities, vulnerability /

Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering 2026-08-04 at 13:54 By Ionut Arghire A crafted prompt to a low-privilege Google ADK agent could be used to pass a malicious hand-off comment to a privileged agent. The post Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering appeared first on SecurityWeek. This […]

Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering Read More »

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks

BMC, data center, Vulnerabilities, vulnerability /

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks 2026-08-04 at 12:56 By Ionut Arghire Over 24,000 internet-accessible server-management interfaces disclose authentication hashes before login. The post Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks Read More »

Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers

bug bounty program, Microsoft, Vulnerabilities, vulnerability /

Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers 2026-08-04 at 08:18 By Eduard Kovacs The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000. The post Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers appeared first on SecurityWeek. This article is an excerpt […]

Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers Read More »

N‑able Patches Vulnerability Exploited to Hack N-central Servers

exploited, N-able, N-central, Vulnerabilities, vulnerability /

N‑able Patches Vulnerability Exploited to Hack N-central Servers 2026-08-03 at 15:34 By Eduard Kovacs The N‑central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass. The post N‑able Patches Vulnerability Exploited to Hack N-central Servers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

N‑able Patches Vulnerability Exploited to Hack N-central Servers Read More »

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks

exploited, Ransomware, SonicWall, Vulnerabilities, vulnerability /

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks 2026-08-03 at 13:39 By Ionut Arghire The INC Ransomware gang has been targeting vulnerable SMA1000 appliances for root access and lateral movement. The post Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks Read More »

Ruby on Rails Patches Critical Vulnerability

Ruby, Ruby on Rails, Vulnerabilities, vulnerability /

Ruby on Rails Patches Critical Vulnerability 2026-08-01 at 14:15 By Ionut Arghire The flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE). The post Ruby on Rails Patches Critical Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Ruby on Rails Patches Critical Vulnerability Read More »

Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace

AI, Artificial Intelligence, Chrome, Google, Vulnerabilities, vulnerability /

Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace 2026-07-31 at 13:28 By Ionut Arghire The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase. The post Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace Read More »

Critical Flaw Led to Azure Cosmos DB Pwnage

Azure, cloud security, Cosmos DB, CosmosEscape, database, patch, Vulnerabilities /

Critical Flaw Led to Azure Cosmos DB Pwnage 2026-07-31 at 12:04 By Ionut Arghire Named CosmosEscape, the vulnerability exposed the primary key for Cosmos DB accounts, granting full read and write access. The post Critical Flaw Led to Azure Cosmos DB Pwnage appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Critical Flaw Led to Azure Cosmos DB Pwnage Read More »

Scroll to Top