Resources
Vghost Linux Kernel Flaw CVE-2026-74580 Gets Public Exploit
A public exploit for Vghost, Linux kernel flaw CVE-2026-74580 in the vhost subsystem, gives local root and a VM escape path across nine years of ...
Fortinet, Citrix, Ivanti Patch 29 Flaws, Including Critical FortiSIEM
Fortinet, Citrix and Ivanti released patches for 29 vulnerabilities, including critical bugs in FortiSIEM, FortiSandbox and Ivanti Neurons Patch for Intune.
SAP Patch Day Fixes 20 Flaws, Including CVSS 10.0 Cloud SDK Bug
SAP's October patch day fixes 20 vulnerabilities, four critical, led by a CVSS 10.0 SSRF flaw in SAP Cloud SDK for Python that exposes OAuth2 ...
IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo
IBM issued three critical bulletins rated CVSS 9.8 to 9.9 for IBM i, Db2 Mirror for i and Maximo AI Service, with no workarounds and ...
Progress Fixes 31 MarkLogic Server Flaws, Three Rated CVSS 9.9
Progress Software's October bulletin fixes 31 MarkLogic Server flaws, including three rated CVSS 9.9 that allow code execution and hidden admin accounts.
CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
CERT/CC says 11 unpatched Thelia flaws, seven enabling remote code execution by back-office users, remain open because the vendor could not be reached.
AnyPwn Heap Overflow in AnyDesk for Linux Gives Root RCE, PoC Public
A public proof of concept for AnyPwn, a heap overflow in AnyDesk for Linux 8.0.2, gives remote root code execution before the user approves a ...
JetBrains Patches Critical Exposed SQL Injection and TeamCity Flaws
JetBrains fixed CVE-2026-108474, a CVSS 9.8 SQL injection in Exposed, and two TeamCity flaws, CVE-2026-106218 and CVE-2026-106219; no exploitation reported.
SonicWall Patches CVSS 10.0 Pre-Auth SSRF in SMA1000 Appliances
SonicWall fixed four SMA1000 flaws, led by CVE-2026-102255, a CVSS 10.0 unauthenticated SSRF in the WorkPlace portal. No exploitation has been reported.
Unpatched LMCache Flaw Allows Unauthenticated Remote Code Execution
JFrog disclosed CVE-2026-105192, a CVSS 9.8 pickle deserialization flaw in LMCache that lets one network message run code. No patched version exists yet.
Weekly Newsletter
Weekly Cybersecurity Newsletter: 14th to 18th August
Explore our latest cybersecurity podcast episodes featuring ransomware attacks, phishing campaigns, corporate breaches, legal showdowns, and deep dives into evolving threats and digital defenses.
This Week In Cybersecurity: 23rd June to 27th June
News Stories New ‘FileFix’ Attack Exploits Windows File Explorer to Deliver Stealthy Commands Threat actors use the search-ms URI protocol ...
This Week In Cybersecurity: 26th to 30th May, 2025
"Cybersecurity threats escalate as ransomware attacks target major organizations, exposing sensitive data and highlighting vulnerabilities in systems across various industries. Stay informed."
This Week In Cybersecurity: 19th to 23rd May, 2025
This week, significant cybersecurity incidents include ransomware attacks, data breaches affecting major organizations, and ongoing threats from state-sponsored groups, highlighting vulnerabilities across various sectors.
This Week In Cybersecurity: 21st – 25th April, 2025
Targeted malware, ransomware, phishing, and ad fraud hit SK Telecom, Baltimore schools, Google, and more this week—exposing critical data and abusing trusted systems.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.