Fortinet has patched a critical zero-day vulnerability (CVE-2026-24858) that allowed attackers to bypass authentication and gain unauthorized administrative access to…
Read More »zero-day exploit
Microsoft has urgently patched a critical, actively exploited Office vulnerability (CVE-2026-21509) that bypasses security features, requiring immediate updates to prevent…
Read More »
Cisco has patched a critical zero-day vulnerability (CVE-2025-20393) in its Email Security and Web Manager appliances, which was actively exploited…
Read More »
A Chinese state-sponsored hacking campaign is exploiting a critical zero-day vulnerability (CVE-2025-20393) in Cisco's Secure Email Gateway and Web Manager…
Read More »
SonicWall has issued an urgent alert for SMA1000 appliance users to apply a critical update, as active attacks exploit a…
Read More »
CISA has mandated a 7-day deadline for U.S. government agencies to patch CVE-2025-58034, a critical Fortinet FortiWeb vulnerability being actively…
Read More »
A zero-day vulnerability (CVE-2025-58034) in FortiWeb firewalls allows authenticated attackers to execute arbitrary OS commands via manipulated HTTP or CLI…
Read More »
Fortinet has patched a critical zero-day vulnerability (CVE-2025-64446) in its FortiWeb firewall, which is being actively exploited to create unauthorized…
Read More »
A critical zero-day vulnerability (CVE-2025-64446) in Fortinet's FortiWeb is being actively exploited, allowing unauthenticated attackers to create unauthorized admin accounts…
Read More »
US authorities issued a critical security alert for a high-risk vulnerability in Samsung mobile devices, exploited since mid-2024 to install…
Read More »
A critical vulnerability (CVE-2025-21042) in Samsung smartphones allows attackers to install LandFall spyware via manipulated DNG images sent through WhatsApp,…
Read More »
The Clop ransomware group breached Oracle's E-Business Suite starting around August 9, exploiting a zero-day vulnerability (CVE-2025-61882) to steal corporate…
Read More »
A critical vulnerability (CVE-2025-10035) in Fortra's GoAnywhere MFT was exploited for over a week before a patch was released on…
Read More »
Cisco has released critical security patches for 14 vulnerabilities in its IOS and IOS XE software, including a high-severity flaw…
Read More »
SonicWall has issued an urgent alert to disable SSLVPN services due to potential zero-day exploits targeting Gen 7 firewalls, with…
Read More »
Google and Microsoft experts discovered a critical SharePoint vulnerability (CVE-2025-53770) exploited by Chinese state-sponsored hackers to steal encryption keys and…
Read More »
Hackers are actively exploiting new vulnerabilities (CVE-2025-53770 and CVE-2025-53771) in Microsoft SharePoint Server, leading to unauthorized access and data exposure…
Read More »
A critical zero-day vulnerability in Microsoft SharePoint (CVE-2025-53771) is being actively exploited, risking data breaches for businesses and government agencies.…
Read More »
Cybersecurity experts discovered a malware campaign targeting outdated SonicWall SMA 100 devices, deploying the stealthy OVERSTEP backdoor via stolen admin…
Read More »
Google researchers identified a cyberattack targeting outdated SonicWall Secure Mobile Access (SMA) appliances, using custom malware called Overstep to evade…
Read More »