A newly disclosed Linux kernel vulnerability, dubbed Zapscape, could allow attackers with kernel-level access inside a … Zapscape (CVE-2026-64561): Critical Linux KVM Vulnerability Enables VM Escape to HostRead more
Vulnerability
Critical vBulletin RCE Exploit Goes Public: Unpatched Forums at Immediate Risk
A newly released public exploit for a critical vBulletin remote code execution (RCE) vulnerability is raising … Critical vBulletin RCE Exploit Goes Public: Unpatched Forums at Immediate RiskRead more
Critical Linux KVM Flaw ‘Januscape’ Enables Guest-to-Host Escape on Intel and AMD
Security researchers have disclosed a critical vulnerability in the Linux Kernel-based Virtual Machine (KVM) hypervisor that … Critical Linux KVM Flaw ‘Januscape’ Enables Guest-to-Host Escape on Intel and AMDRead more
Undocumented Backdoor in Tenda Router Firmware Allows Attackers to Gain Full Admin Access
A newly disclosed security vulnerability has revealed that several firmware versions for Tenda networking devices contain … Undocumented Backdoor in Tenda Router Firmware Allows Attackers to Gain Full Admin AccessRead more
China-Linked Hackers Exploit Critical Roundcube Flaws to Target US and Canadian Universities
A newly discovered cyber espionage campaign has revealed that a suspected China-aligned threat group is targeting … China-Linked Hackers Exploit Critical Roundcube Flaws to Target US and Canadian UniversitiesRead more
Critical Oracle E-Business Suite Vulnerability Under Active Exploitation
A critical security vulnerability affecting Oracle E-Business Suite is being actively exploited in the wild, raising … Critical Oracle E-Business Suite Vulnerability Under Active ExploitationRead more
Cordyceps CI/CD Vulnerability Exposes Microsoft, Google, and Other Major Open-Source Repositories
Cybersecurity researchers have identified a dangerous new class of CI/CD (Continuous Integration and Continuous Deployment) workflow … Cordyceps CI/CD Vulnerability Exposes Microsoft, Google, and Other Major Open-Source RepositoriesRead more
SquidBleed Vulnerability Leaks HTTP Credentials Through Shared Squid Proxies
Security researchers have disclosed a new vulnerability in the Squid web proxy that could allow authorized … SquidBleed Vulnerability Leaks HTTP Credentials Through Shared Squid ProxiesRead more
Gravity SMTP Vulnerability Actively Exploited: 100,000+ WordPress Sites at Risk
A recently patched security flaw in the popular Gravity SMTP WordPress plugin is actively being exploited … Gravity SMTP Vulnerability Actively Exploited: 100,000+ WordPress Sites at RiskRead more
F5 Fixes Two Critical NGINX Vulnerabilities With Potential Remote Code Execution Risk
F5 has released urgent security updates to address two critical vulnerabilities in NGINX Open Source that … F5 Fixes Two Critical NGINX Vulnerabilities With Potential Remote Code Execution RiskRead more
