Vulnerabilities

3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs

exploited, Featured, FortiBleed, Fortinet, FortiSandbox, Vulnerabilities, vulnerability /

3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs 2026-06-17 at 09:53 By Eduard Kovacs SOCRadar has detected 30,000 compromised Fortinet firewalls that expose networks to hacking.  The post 3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs Read More »

Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure

Application Security, Athena, Chainguard, Coalition, open source, OSS, Vulnerabilities /

Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure 2026-06-16 at 12:39 By Ionut Arghire Over two dozen organizations built a shared platform to triage vulnerabilities, fix them, and secure the software before patches arrive. The post Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure appeared first on SecurityWeek. This article is an excerpt

Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure Read More »

Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks

Cisco, exploited, Featured, Network Security, SD-WAN, Vulnerabilities, Zero-Day /

Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks 2026-06-16 at 09:20 By Eduard Kovacs Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write. The post Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks Read More »

Reversing NVIDIA’s CVE-2026-24190: How a Kernel Flaw Put Enterprise AI Clusters and Workstations at Risk

Artificial Intelligence, Vulnerabilities /

Reversing NVIDIA’s CVE-2026-24190: How a Kernel Flaw Put Enterprise AI Clusters and Workstations at Risk 2026-06-15 at 17:00 By Alon Bancic Executive Summary: Bypassing Boundaries in Enterprise AI Infrastructure The massive global adoption of artificial intelligence (AI) and large language models (LLMs) has fundamentally rewritten the enterprise threat landscape. Modern high-compute bare metal clusters, cloud

Reversing NVIDIA’s CVE-2026-24190: How a Kernel Flaw Put Enterprise AI Clusters and Workstations at Risk Read More »

Ivanti Sentry Exploitation Attempts Hitting Honeypots

CISA KEV, exploited, Ivanti, Vulnerabilities, vulnerability /

Ivanti Sentry Exploitation Attempts Hitting Honeypots 2026-06-12 at 12:44 By Ionut Arghire The critical-severity OS command injection vulnerability allows attackers to execute arbitrary code with root privileges. The post Ivanti Sentry Exploitation Attempts Hitting Honeypots appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Ivanti Sentry Exploitation Attempts Hitting Honeypots Read More »

Chrome 149 Update Patches 28 Vulnerabilities

Chrome, Vulnerabilities, vulnerability /

Chrome 149 Update Patches 28 Vulnerabilities 2026-06-12 at 12:27 By Ionut Arghire The browser refresh resolved critical and high-severity security defects, including a dozen use-after-free bugs. The post Chrome 149 Update Patches 28 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome 149 Update Patches 28 Vulnerabilities Read More »

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters

cybercrime, exploited, Featured, Oracle, Oracle PeopleSoft, ShinyHunters, Vulnerabilities, Zero-Day /

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters 2026-06-12 at 09:44 By Eduard Kovacs Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation. The post Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters Read More »

Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks

exploited, Oracle, Oracle PeopleSoft, ShinyHunters, Vulnerabilities, Zero-Day /

Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks 2026-06-11 at 16:57 By Eduard Kovacs Oracle has released a patch for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks. The post Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks appeared first on SecurityWeek. This article is an excerpt

Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks Read More »

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk

BOD, CISA, CISA KEV, Government, Vulnerabilities, vulnerability, vulnerability management /

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk 2026-06-11 at 16:01 By Ionut Arghire The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries. The post CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk appeared first on SecurityWeek. This

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk Read More »

Hackers Exploit Langflow Vulnerability for Remote Code Execution

exploited, Langflow, remote code execution, Vulnerabilities, vulnerability /

Hackers Exploit Langflow Vulnerability for Remote Code Execution 2026-06-11 at 14:52 By Ionut Arghire Disclosed in March, the security defect enables unauthenticated attackers to write files to arbitrary locations on the system. The post Hackers Exploit Langflow Vulnerability for Remote Code Execution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Hackers Exploit Langflow Vulnerability for Remote Code Execution Read More »

Microsoft Patches Exploited Exchange Server Vulnerability

Exchange, exploited, Featured, Microsoft, patch, Vulnerabilities, vulnerability /

Microsoft Patches Exploited Exchange Server Vulnerability 2026-06-11 at 11:18 By Eduard Kovacs The company warned about zero-day attacks exploiting the Exchange Server vulnerability CVE-2026-42897 on May 14.  The post Microsoft Patches Exploited Exchange Server Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches Exploited Exchange Server Vulnerability Read More »

Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers

data center, HVAC, ICS, ICS/OT, Trane, UPS, Vertiv, Vulnerabilities, vulnerability /

Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers 2026-06-10 at 17:24 By Eduard Kovacs Claroty researchers have analyzed the security of Vertiv UPS network cards and the Trane Tracer SC+ HVAC controller. The post Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers appeared first on SecurityWeek. This article is

Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers Read More »

ServiceNow Patches Vulnerability Exploited Against Some Customers

exploited, Featured, ServiceNow, Vulnerabilities, vulnerability /

ServiceNow Patches Vulnerability Exploited Against Some Customers 2026-06-10 at 14:22 By Eduard Kovacs The company updated hosted customer instances to patch a security issue it reportedly had known about since April 7. The post ServiceNow Patches Vulnerability Exploited Against Some Customers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

ServiceNow Patches Vulnerability Exploited Against Some Customers Read More »

Critical Vulnerabilities Patched in Fortinet, Ivanti Products

Fortinet, Ivanti, Patch Tuesday, patches, Vulnerabilities, vulnerability /

Critical Vulnerabilities Patched in Fortinet, Ivanti Products 2026-06-10 at 12:16 By Ionut Arghire Two OS command injection flaws can be exploited remotely, without authentication, for arbitrary code execution. The post Critical Vulnerabilities Patched in Fortinet, Ivanti Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Vulnerabilities Patched in Fortinet, Ivanti Products Read More »

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact

ICS, ICS Patch Tuesday, ICS/OT, Patch Tuesday, Schneider Electric, Siemens, Vulnerabilities, vulnerability /

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact 2026-06-10 at 10:42 By Eduard Kovacs In addition, Rockwell Automation announced some enhancements to its SecureOT cybersecurity solution for OT. The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact Read More »

No Patch Planned for Exploited Arista EOS Vulnerability

Arista, exploited, Vulnerabilities, Zero-Day /

No Patch Planned for Exploited Arista EOS Vulnerability 2026-06-10 at 09:55 By Ionut Arghire Organizations are advised to apply vendor-supplied mitigations or discontinue the vulnerable devices. The post No Patch Planned for Exploited Arista EOS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

No Patch Planned for Exploited Arista EOS Vulnerability Read More »

Microsoft Patches 200 Vulnerabilities

Microsoft, patch, Patch Tuesday, Vulnerabilities, vulnerability /

Microsoft Patches 200 Vulnerabilities 2026-06-09 at 22:39 By Eduard Kovacs Three of the vulnerabilities fixed with the latest Patch Tuesday updates were publicly disclosed before Microsoft addressed them. The post Microsoft Patches 200 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches 200 Vulnerabilities Read More »

OpenSSL Patches High-Severity Vulnerability Found With AI

AI, OpenSSL, Vulnerabilities, vulnerability /

OpenSSL Patches High-Severity Vulnerability Found With AI 2026-06-09 at 20:08 By Eduard Kovacs A total of 18 vulnerabilities have been patched in the latest OpenSSL releases, including many that were potentially discovered by AI. The post OpenSSL Patches High-Severity Vulnerability Found With AI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

OpenSSL Patches High-Severity Vulnerability Found With AI Read More »

Scroll to Top