Vulnerability

CISA Warns of Linux Kernel Missing Initialization Vulnerability Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency has warned that attackers are exploiting a Linux kernel vulnerability (CVE-2026-46300) that can…

1 week ago

Chinese Hackers Exploit VMware ESXi 0-Day to Hide Malicious Activity on Compromised Servers

Chinese-linked hackers exploited a VMware ESXi zero-day vulnerability to hide activity on compromised servers during espionage operations against U.S. organizations,…

1 week ago

Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices

Cisco released security updates for actively exploited CVE-2026-76418, a flaw in Secure Firewall ASA and FTD software that lets unauthenticated…

1 week ago

Veeam Patches Critical Backup & Replication Authorization Bypass Vulnerability

Veeam released security fixes for a critical authorization bypass vulnerability in Veeam Backup & Replication that lets an attacker without…

1 week ago

Researchers Exploit OpenAI API Flaw to Extract Hidden GPT-5.6 Reasoning Traces

Researchers at Xint found an OpenAI API flaw that exposed hidden reasoning in GPT-5.6 models by routing prompts through a…

1 week ago

Critical HashiCorp Consul Kubernetes Flaw Allows Attackers to Gain Elevated Privileges

HashiCorp has released fixes for a Consul-k8s authorization bypass that could allow an attacker to gain elevated Consul privileges from…

1 week ago

Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones

Apple released iOS 18.7.11 and iPadOS 18.7.11 to patch a CoreGraphics zero-day vulnerability that attackers may have used in targeted…

1 week ago

OpenAI Codex Breaks USB Encryption in Minutes, Exposing Hardcoded Keys and Security Flaws

OpenAI Codex helped researcher Xusheng Li uncover flaws in four USB protection products, including hardcoded encryption keys and hidden accounts…

1 week ago

Microsoft Releases Out-of-Band Security Updates for Brotli and .NET tarballs Vulnerability

Microsoft has released out-of-band security updates for .NET to fix a Brotli buffer overflow and unsafe ownership settings in Linux…

2 weeks ago

Cloudflare Release Emergency WAF Ruleset Update Following Brotli Vulnerability

Cloudflare has announced an emergency Web Application Firewall (WAF) ruleset update linked to CVE-2026-111497, a Brotli vulnerability. The October 25,…

2 weeks ago