Resources
Progress Patches 15 WS_FTP Server Flaws, Including CVSS 10.0 Bug
Progress fixed 15 WS_FTP Server vulnerabilities, led by CVE-2026-84295, a CVSS 10.0 authentication flaw that exposes administrative credentials to attackers.
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus two other flaws in KB3228994.
NebuSec: Telegram Android Flaw Chain Can Hijack Phone on Call
NebuSec says a Telegram for Android flaw, chained with an info leak and a root exploit, could take over a phone when a user answers ...
Chrome 156 Update Fixes 21 Flaws, Including Critical MediaStream Bug
Google's Chrome 156 update fixes 21 vulnerabilities, including critical MediaStream memory corruption bug CVE-2026-76024, with no exploitation reported.
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Kerio Connect Webmail XSS CVE-2026-112353 Exploited via SVG Files
Proofpoint observed attackers exploiting Kerio Connect webmail flaw CVE-2026-112353 with crafted SVG attachments to steal user credentials and mailbox contents.
FreeSWITCH Fixes Critical SIP Flaw CVE-2026-116779 Under Attack
SignalWire disclosed three critical FreeSWITCH flaws and says exploitation of the SIP MESSAGE command execution bug CVE-2026-116779 has been seen in the wild.
Dell Patches Four Unauthenticated CVSS 9.8 Data Domain Flaws
Dell advisory DSA-2026-416 fixes 48 Dell-specific PowerProtect Data Domain flaws, including four unauthenticated CVSS 9.8 bugs allowing root command execution.
Apache Kafka JWT Bypass CVE-2026-110985 Among 12 Fixed Flaws
Apache Kafka fixed 12 vulnerabilities, including CVE-2026-110985, a JWT validation bypass that lets unauthenticated attackers forge tokens for any user.
Weekly Newsletter
Weekly Cybersecurity Newsletter: 14th to 18th August
Explore our latest cybersecurity podcast episodes featuring ransomware attacks, phishing campaigns, corporate breaches, legal showdowns, and deep dives into evolving threats and digital defenses.
This Week In Cybersecurity: 23rd June to 27th June
News Stories New ‘FileFix’ Attack Exploits Windows File Explorer to Deliver Stealthy Commands Threat actors use the search-ms URI protocol ...
This Week In Cybersecurity: 26th to 30th May, 2025
"Cybersecurity threats escalate as ransomware attacks target major organizations, exposing sensitive data and highlighting vulnerabilities in systems across various industries. Stay informed."
This Week In Cybersecurity: 19th to 23rd May, 2025
This week, significant cybersecurity incidents include ransomware attacks, data breaches affecting major organizations, and ongoing threats from state-sponsored groups, highlighting vulnerabilities across various sectors.
This Week In Cybersecurity: 21st – 25th April, 2025
Targeted malware, ransomware, phishing, and ad fraud hit SK Telecom, Baltimore schools, Google, and more this week—exposing critical data and abusing trusted systems.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.