vulnerability

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

exploited, Featured, SharePoint, Vulnerabilities, vulnerability /

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks 2026-09-27 at 12:23 By Eduard Kovacs CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks Read More »

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration

AI, Artificial Intelligence, Vulnerabilities, vulnerability /

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration 2026-09-25 at 12:27 By Ionut Arghire Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks. The post ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration Read More »

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

email security, exploited, Featured, Roundcube, Vulnerabilities, vulnerability /

Roundcube Webmail Vulnerability in Attackers’ Crosshairs 2026-09-25 at 09:57 By Ionut Arghire Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Roundcube Webmail Vulnerability in Attackers’ Crosshairs Read More »

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted

SolarWinds, Vulnerabilities, vulnerability /

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted 2026-09-24 at 13:40 By Ionut Arghire The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication. The post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted Read More »

Critical WordPress Vulnerability Exploited Immediately After Disclosure

exploited, Featured, Vulnerabilities, vulnerability, WordPress /

Critical WordPress Vulnerability Exploited Immediately After Disclosure 2026-09-24 at 10:12 By Ionut Arghire Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code. The post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical WordPress Vulnerability Exploited Immediately After Disclosure Read More »

Adobe Patches Critical Flaws in Connect, AEM Forms

Adobe, patch, Vulnerabilities, vulnerability /

Adobe Patches Critical Flaws in Connect, AEM Forms 2026-09-23 at 14:40 By Ionut Arghire The nine critical security defects could be exploited for arbitrary code execution and privilege escalation. The post Adobe Patches Critical Flaws in Connect, AEM Forms appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches Critical Flaws in Connect, AEM Forms Read More »

Arista Urges Immediate Patching of Exploited VCO Zero-Day

Arista, CISA KEV, exploited, Vulnerabilities, vulnerability, Zero-Day /

Arista Urges Immediate Patching of Exploited VCO Zero-Day 2026-09-23 at 11:33 By Ionut Arghire Remote attackers could trigger the critical-severity flaw to access privileged internal functionality. The post Arista Urges Immediate Patching of Exploited VCO Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Arista Urges Immediate Patching of Exploited VCO Zero-Day Read More »

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day

Big-IP, exploited, F5, Vulnerabilities, vulnerability, Zero-Day /

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day 2026-09-23 at 10:34 By Ionut Arghire Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution. The post Critical F5 BIG-IP Vulnerability Exploited as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical F5 BIG-IP Vulnerability Exploited as Zero-Day Read More »

Check Point Patches Exploited Management Server Zero-Day

Check Point, exploited, Featured, Vulnerabilities, vulnerability /

Check Point Patches Exploited Management Server Zero-Day 2026-09-23 at 09:14 By Ionut Arghire The critical-severity flaw could allow unauthenticated attackers to upload and execute arbitrary scripts. The post Check Point Patches Exploited Management Server Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Check Point Patches Exploited Management Server Zero-Day Read More »

Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers

exploited, Switch, Vulnerabilities, vulnerability, Zyxel /

Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers 2026-09-22 at 14:55 By Ionut Arghire A Chinese threat actor has exploited the bug to exfiltrate sensitive information from nearly 1,000 ZyXEL switches. The post Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers Read More »

WordPress Patches ‘Click2Shell’ Vulnerability

Click2Shell, patch, Vulnerabilities, vulnerability, WordPress /

WordPress Patches ‘Click2Shell’ Vulnerability 2026-09-22 at 13:22 By Ionut Arghire The bug lets attackers automatically install and preview themes and could lead to remote code execution. The post WordPress Patches ‘Click2Shell’ Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

WordPress Patches ‘Click2Shell’ Vulnerability Read More »

Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities

CISA KEV, exploited, Linux, Linux kernel, Vulnerabilities, vulnerability /

Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities 2026-09-21 at 12:31 By Ionut Arghire Attackers could exploit the flaws to cause denial-of-service conditions, disclose memory, or modify memory. The post Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities Read More »

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code

AI, Artificial Intelligence, ChatGPT, OpenAI, source code, vulnerability /

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code 2026-09-18 at 15:45 By Eduard Kovacs Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts.  The post AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code Read More »

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

AI, Artificial Intelligence, Azure, Cloud, cloud security, Copilot, Featured, Microsoft, patches, Vulnerabilities, vulnerability /

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products 2026-09-18 at 13:57 By Eduard Kovacs Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority. The post Microsoft Patches 18 Vulnerabilities in AI, Cloud Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products Read More »

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

agentic AI, AI, Claude Code, Don't miss, GitHub, Hot stuff, News, vulnerability /

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched 2026-09-18 at 11:49 By Sinisa Markovic Four major AI coding agents, Claude Code, Codex, GitHub Copilot and Gemini CLI, all share the same zero-click RCE vulnerability, one that could give an attacker the same reach into a company’s systems and data as the […]

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched Read More »

Critical Orkes Conductor Vulnerability Exploited in Attacks

exploited, Orkes, Vulnerabilities, vulnerability /

Critical Orkes Conductor Vulnerability Exploited in Attacks 2026-09-18 at 11:42 By Ionut Arghire CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions. The post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Orkes Conductor Vulnerability Exploited in Attacks Read More »

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

Check Point, Endpoint Security, Kaspersky, patch, security product vulnerability, Tanium, Vulnerabilities, vulnerability /

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities 2026-09-18 at 10:14 By Eduard Kovacs Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges. The post Check Point, Kaspersky, Tanium Patch Product Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities Read More »

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot

CISA, Government, Risk Management, Vulnerabilities, vulnerability, vulnerability management /

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot 2026-09-17 at 17:28 By Eduard Kovacs The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk. The post CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot Read More »

ISC Patches 14 Vulnerabilities in BIND 9 Security Update

BIND, DNS, patch, Vulnerabilities, vulnerability /

ISC Patches 14 Vulnerabilities in BIND 9 Security Update 2026-09-17 at 15:39 By Ionut Arghire Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process. The post ISC Patches 14 Vulnerabilities in BIND 9 Security Update appeared first on SecurityWeek. This article is an excerpt from […]

ISC Patches 14 Vulnerabilities in BIND 9 Security Update Read More »

Scroll to Top