Resources
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
HashiCorp fixed CVE-2026-110720, a CVSS 9.9 authorization flaw in consul-k8s that lets low-privileged users gain elevated Consul privileges across namespaces.
Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities
Rapid7 reportedly disclosed 17 Zimbra Collaboration Suite flaws, from cross-site scripting to sudo-based root escalation, with patch releases now available.
OpenMage Fixes 34 Magento LTS Flaws, Including Critical OAuth CSRF
OpenMage Magento LTS 20.19.0 and 20.18.2 fix 34 vulnerabilities, including a CVSS 9.0 OAuth CSRF flaw that could yield a persistent admin or customer API ...
Mautic 7.2.2 Patches CVSS 9.9 File-Upload RCE CVE-2026-115188
Mautic 7.2.2, 6.0.10 and 5.2.12 fix CVE-2026-115188, a CVSS 9.9 file-upload remote code execution flaw, along with SQL injection and API access control bugs.
Public PoC Released for macOS autofs Root and Gatekeeper Flaws
A researcher published a PoC for macOS autofs flaws CVE-2026-84568 (root) and CVE-2026-84570 (Gatekeeper bypass), which Apple already patched in September.
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers back to version 7.0.
Arista Patches Exploited VeloCloud Orchestrator Zero-Day
Arista fixed CVE-2026-114625, a CVSS 9.9 SQL injection in VeloCloud Orchestrator that it says is exploited, letting low-privilege users gain operator access.
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin Console.
ZDI Posts Unpatched Linux KSMBD RCE Flaws to Public Mailing Lists
Trend Micro's ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel mailing lists, with no mainline fix available and no CVE IDs ...
Weekly Newsletter
Weekly Cybersecurity Newsletter: 14th to 18th August
Explore our latest cybersecurity podcast episodes featuring ransomware attacks, phishing campaigns, corporate breaches, legal showdowns, and deep dives into evolving threats and digital defenses.
This Week In Cybersecurity: 23rd June to 27th June
News Stories New ‘FileFix’ Attack Exploits Windows File Explorer to Deliver Stealthy Commands Threat actors use the search-ms URI protocol ...
This Week In Cybersecurity: 26th to 30th May, 2025
"Cybersecurity threats escalate as ransomware attacks target major organizations, exposing sensitive data and highlighting vulnerabilities in systems across various industries. Stay informed."
This Week In Cybersecurity: 19th to 23rd May, 2025
This week, significant cybersecurity incidents include ransomware attacks, data breaches affecting major organizations, and ongoing threats from state-sponsored groups, highlighting vulnerabilities across various sectors.
This Week In Cybersecurity: 21st – 25th April, 2025
Targeted malware, ransomware, phishing, and ad fraud hit SK Telecom, Baltimore schools, Google, and more this week—exposing critical data and abusing trusted systems.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.