vulnerability

Cisco Patches Critical Vulnerabilities in Enterprise Networking Products

Cisco, patch, Vulnerabilities, vulnerability /

Cisco Patches Critical Vulnerabilities in Enterprise Networking Products 2026-03-05 at 10:51 By Ionut Arghire Cisco has rolled out patches for 48 vulnerabilities in Firewall ASA, Secure FMC, and Secure FTD products. The post Cisco Patches Critical Vulnerabilities in Enterprise Networking Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches Critical Vulnerabilities in Enterprise Networking Products Read More »

The vulnerability that turns your AI agent against you

agentic AI, Comet, News, Perplexity, vulnerability, Zenity /

The vulnerability that turns your AI agent against you 2026-03-04 at 16:08 By Help Net Security Zenity Labs disclosed PleaseFix, a family of critical vulnerabilities affecting agentic browsers, including Perplexity Comet, that allow attackers to hijack AI agents, access local files, and steal credentials within authenticated user sessions. The vulnerabilities can be triggered through malicious […]

The vulnerability that turns your AI agent against you Read More »

Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500)

CVE, Don't miss, enterprise, Hot stuff, IceWarp, News, security update, Shadowserver, SMBs, vulnerability /

Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500) 2026-03-04 at 15:57 By Zeljka Zorz A critical RCE vulnerability (CVE-2025-14500) in IceWarp, an EU-made business communication and collaboration platform, may be exploited by attackers to gain unauthorized access to exposed unpatched servers. According to the Shadowserver Foundation, there are currently over 1,200 internet-facing […]

Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500) Read More »

VMware Aria Operations Vulnerability Exploited in the Wild

exploited, VMWare, VMware Aria, Vulnerabilities, vulnerability /

VMware Aria Operations Vulnerability Exploited in the Wild 2026-03-04 at 09:28 By Eduard Kovacs The recently patched CVE-2026-22719 can be exploited by an unauthenticated attacker for remote code execution.  The post VMware Aria Operations Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

VMware Aria Operations Vulnerability Exploited in the Wild Read More »

Coruna: Spy-grade iOS exploit kit powering financial crime

CVE, cyber espionage, cybercrime, Don't miss, exploit kit, Google, Hot stuff, iOS, Mandiant, News, surveillance, vulnerability /

Coruna: Spy-grade iOS exploit kit powering financial crime 2026-03-03 at 21:02 By Zeljka Zorz A powerful iOS exploit kit has circulated among multiple threat actors over the past year, moving from a commercial surveillance operation to state-linked espionage campaigns and, ultimately, ended into the hands of financially motivated hackers, according to new research from Google’s […]

Coruna: Spy-grade iOS exploit kit powering financial crime Read More »

Honeywell, Researcher Clash Over Impact of Building Controller Vulnerability

building, ICS, ICS/OT, vulnerability /

Honeywell, Researcher Clash Over Impact of Building Controller Vulnerability 2026-03-03 at 19:46 By Eduard Kovacs The researcher says he has identified thousands of internet-exposed IQ4 building management controllers. The post Honeywell, Researcher Clash Over Impact of Building Controller Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Honeywell, Researcher Clash Over Impact of Building Controller Vulnerability Read More »

Android Update Patches Exploited Qualcomm Zero-Day

Android, exploited, Mobile & Wireless, mobile security, Qualcomm, Vulnerabilities, vulnerability, Zero-Day /

Android Update Patches Exploited Qualcomm Zero-Day 2026-03-03 at 15:07 By Ionut Arghire An integer overflow or wraparound in the Qualcomm graphics component, the bug leads to memory corruption. The post Android Update Patches Exploited Qualcomm Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Android Update Patches Exploited Qualcomm Zero-Day Read More »

Vulnerability in MS-Agent AI Framework Can Allow Full System Compromise

AI, Artificial Intelligence, MS-Agent, Vulnerabilities, vulnerability /

Vulnerability in MS-Agent AI Framework Can Allow Full System Compromise 2026-03-03 at 13:58 By Ionut Arghire Improper input sanitization in the framework can be exploited through the Shell tool, allowing attackers to modify system files and steal data. The post Vulnerability in MS-Agent AI Framework Can Allow Full System Compromise appeared first on SecurityWeek. This […]

Vulnerability in MS-Agent AI Framework Can Allow Full System Compromise Read More »

Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant

AI, Artificial Intelligence, browser extension, Chrome, extension, Vulnerabilities, vulnerability /

Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant 2026-03-02 at 17:46 By Ionut Arghire Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files. The post Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Vulnerability Allowed Hijacking Chrome’s Gemini Live AI Assistant Read More »

OpenClaw Vulnerability Allowed Websites to Hijack AI Agents

AI, Artificial Intelligence, OpenClaw, Vulnerabilities, vulnerability /

OpenClaw Vulnerability Allowed Websites to Hijack AI Agents 2026-03-02 at 16:57 By Ionut Arghire Malicious websites could open a WebSocket connection to localhost on the OpenClaw gateway port, brute force passwords, and take control of the agent. The post OpenClaw Vulnerability Allowed Websites to Hijack AI Agents appeared first on SecurityWeek. This article is an […]

OpenClaw Vulnerability Allowed Websites to Hijack AI Agents Read More »

Juniper Networks PTX Routers Affected by Critical Vulnerability 

Juniper, router, Vulnerabilities, vulnerability /

Juniper Networks PTX Routers Affected by Critical Vulnerability  2026-02-27 at 12:47 By Eduard Kovacs An out-of-band security update for Junos OS Evolved patches the remote code execution vulnerability CVE-2026-21902. The post Juniper Networks PTX Routers Affected by Critical Vulnerability  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Juniper Networks PTX Routers Affected by Critical Vulnerability  Read More »

Critical Flaws Exposed Gardyn Smart Gardens to Remote Hacking

Featured, Gardyn, ICS/OT, OT, smart garden, vulnerability /

Critical Flaws Exposed Gardyn Smart Gardens to Remote Hacking 2026-02-27 at 10:17 By Eduard Kovacs CISA has released an advisory to warn about four vulnerabilities discovered by a researcher in Gardyn Home and Gardyn Studio. The post Critical Flaws Exposed Gardyn Smart Gardens to Remote Hacking appeared first on SecurityWeek. This article is an excerpt […]

Critical Flaws Exposed Gardyn Smart Gardens to Remote Hacking Read More »

Claude Code Flaws Exposed Developer Devices to Silent Hacking

AI, Claude, Claude Code, Vulnerabilities, vulnerability /

Claude Code Flaws Exposed Developer Devices to Silent Hacking 2026-02-26 at 19:37 By Eduard Kovacs Anthropic has patched vulnerabilities whose impact was demonstrated by Check Point via malicious configuration files. The post Claude Code Flaws Exposed Developer Devices to Silent Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Claude Code Flaws Exposed Developer Devices to Silent Hacking Read More »

Zyxel Patches Critical Vulnerability in Many Device Models

router, Vulnerabilities, vulnerability, Zyxel /

Zyxel Patches Critical Vulnerability in Many Device Models 2026-02-26 at 14:40 By Ionut Arghire The issue impacts the UPnP function of multiple device models and could be exploited for remote code execution. The post Zyxel Patches Critical Vulnerability in Many Device Models appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Zyxel Patches Critical Vulnerability in Many Device Models Read More »

Trend Micro Patches Critical Apex One Vulnerabilities

Apex One, Endpoint Security, Trend Micro, Vulnerabilities, vulnerability /

Trend Micro Patches Critical Apex One Vulnerabilities 2026-02-26 at 12:27 By Eduard Kovacs TrendAI has fixed eight critical and high-severity issues in Windows and macOS endpoint security products. The post Trend Micro Patches Critical Apex One Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Trend Micro Patches Critical Apex One Vulnerabilities Read More »

Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers

Catalyst, Cisco, exploited, Featured, Malware & Threats, SD-WAN, Vulnerabilities, vulnerability, Zero-Day /

Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers 2026-02-26 at 11:52 By Ionut Arghire Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges. The post Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers appeared first on SecurityWeek. This article is an excerpt from […]

Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers Read More »

SolarWinds Patches Four Critical Serv-U Vulnerabilities

SolarWinds, Vulnerabilities, vulnerability /

SolarWinds Patches Four Critical Serv-U Vulnerabilities 2026-02-25 at 17:30 By Ionut Arghire The four security defects could be exploited for remote code execution but require administrative privileges. The post SolarWinds Patches Four Critical Serv-U Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SolarWinds Patches Four Critical Serv-U Vulnerabilities Read More »

The Week in Vulnerabilities: WordPress, BeyondTrust, and Critical ICS Bugs

cyber news, vulnerability, vulnerability management /

The Week in Vulnerabilities: WordPress, BeyondTrust, and Critical ICS Bugs 2026-02-25 at 15:20 By Ashish Khaitan Cyble Research & Intelligence Labs (CRIL) tracked 1,102 vulnerabilities last week. Of these, 166 vulnerabilities already have publicly available Proof-of-Concept (PoC) exploits, significantly increasing the likelihood of real-world attacks. A total of 49 vulnerabilities were rated critical under CVSS v3.1, while 32 received critical […]

The Week in Vulnerabilities: WordPress, BeyondTrust, and Critical ICS Bugs Read More »

CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108)

0-day, CISA, Don't miss, file-sharing, FileZen, Hot stuff, Japan, JPCERT/CC, News, Ransomware, Soliton, vulnerability /

CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108) 2026-02-25 at 12:14 By Zeljka Zorz CISA has added CVE-2026-25108, an OS command injection vulnerability in Soliton Systems’ FileZen secure file transfer solution, to its Known Exploited Vulnerabilities (KEV) catalog. The vendor has confirmed active exploitation, stating it has received multiple reports of damage caused […]

CISA flags exploited FileZen command injection bug, patch now! (CVE-2026-25108) Read More »

VMware Aria Operations Vulnerability Could Allow Remote Code Execution

Aria Operations, VMWare, Vulnerabilities, vulnerability /

VMware Aria Operations Vulnerability Could Allow Remote Code Execution 2026-02-24 at 16:42 By Eduard Kovacs Broadcom has patched several vulnerabilities in VMware Aria Operations, including high-severity flaws. The post VMware Aria Operations Vulnerability Could Allow Remote Code Execution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

VMware Aria Operations Vulnerability Could Allow Remote Code Execution Read More »

Scroll to Top