Disclosed flaws, patches and exploitation status.
China-linked threat actors have been observed chaining multiple vulnerabilities in Google Chrome and Microsoft Windows as part of sophisticated cyber-espionage campaigns targeting non-governmental organizations and other high-value organizations.
Security researchers have disclosed a high-severity vulnerability in Telegram Desktop that could allow malicious JavaScript hidden inside a seemingly normal chat message to execute when a conversation is exported as HTML and opened in a web browser.
A browser extension advertised as a Twitch enhancement tool has been found exposing users' OAuth session tokens to third-party proxy infrastructure, potentially allowing attackers to access affected Twitch accounts without knowing the users' passwords.
The cybersecurity landscape remained highly active this week, with attackers targeting enterprise firewalls, operating systems, browsers, databases and cloud environments. Security teams also faced a record-scale Microsoft Patch Tuesday, multiple vulnerabilities under active exploitation, and growing evidence that artificial intelligence is being integrated directly into offensive cyber operations
A newly disclosed vulnerability in Plesk Backup Manager could allow a low-privileged customer to escalate privileges and obtain full root access to a vulnerable Linux server.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog.
GitLab has patched a maximum-severity path traversal vulnerability that can allow unauthenticated attackers to read arbitrary files from vulnerable GitLab servers.
Attackers have been actively exploiting vulnerabilities in self-hosted JFrog Artifactory deployments to obtain administrator privileges, create persistent accounts, execute commands and install backdoors, raising serious concerns for organizations that rely on Artifactory as a central component of their software supply chains.
A China-linked threat actor tracked as UNC3569 has exploited a newly disclosed vulnerability in Sogou Input Method for Windows to compromise systems and deploy the GRAYRABBIT backdoor, according to research from Gen Threat Labs.
PaperCut has released new regular maintenance updates for its PaperCut NG and PaperCut MF print-management platforms, replacing the emergency patches previously issued to address two vulnerabilities that have been actively exploited in the wild.
Threat actors are actively exploiting a critical vulnerability in Cisco firewall software to obtain elevated privileges and deploy malicious payloads, highlighting the growing risk posed by compromised internet-facing security appliances.
A Russian-speaking threat actor has reportedly used hundreds of autonomous AI agents to exploit vulnerable PaperCut NG and MF servers, compromising at least 440 instances belonging to 395 organizations across 48 countries.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.