Technology ❯ Cybersecurity ❯ Incident Response ❯ Vulnerability Management

Patch Management

Paperclip Flaws Let Attackers Execute Commands on Servers and Developer Machines

Rapid7 exploit tooling and inconsistent release metadata increase urgency for operators to confirm patches and audit deployments.

Adobe Extension Flaw Let Websites Read WhatsApp Web Data

Microsoft Ships Record Patch Tuesday With 622 Fixes

Critical Joomla Extension Flaws Exploited for Remote Code Execution

Critical Zero-Day in Gogs Lets Authenticated Users Run Remote Code

Nine-Year Linux Kernel Flaw Lets Local Users Steal SSH Keys and Gain Root

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Google Strikes Pentagon Deal To Run Gemini on Classified Networks

Google Patches Antigravity Flaw That Let Prompt Injection Break the Sandbox

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

Hackers Exploit Critical Ninja Forms File Uploads Flaw to Seize WordPress Sites

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

Public Exploits Detail n8n Sandbox Escape That Lets Workflow Users Take Over Servers

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

WordPress King Addons Flaw Actively Exploited to Create Admin Accounts

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Active Exploits Target Gladinet CentreStack and TrioFox Zero-Day That Can Lead to RCE

HTTP/2 MadeYouReset Flaw Exposes Servers to DoS Attacks