Technology ❯ Cybersecurity

Vulnerabilities

Zero-Day Exploits Remote Code Execution Software Vulnerabilities Exploits Zero-Day Vulnerabilities CVE Exploitation Malware Command Injection Software Security

Critical Telnetd Bug in GNU Inetutils Sees Real-World Attacks as Patch Ships

Active exploitation follows release of a fix for a trivial telnetd root bypass.

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog With Feb. 12 Remediation Deadline

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

SmarterMail Admin-Reset Flaw Under Active Exploitation Days After Patch

Tesla Infotainment Hacked as Pwn2Own Automotive Finds 37 Zero‑Days on Day 1

Cisco Patches Actively Exploited RCE in Unified Communications and Webex Calling

Researchers Expose Gemini Calendar Data Leak via Malicious Invites as Google Rolls Out Mitigations

Researchers Detail Chainlit Flaws Exposing Cloud Secrets, Urge Immediate Updates

EU-Backed GCVE Launches as Decentralized Alternative to CVE

Cloudflare Details ACME Bug Allowing WAF Bypass to Origins After October Fix

WhisperPair Flaws Expose Bluetooth Earbuds to Hijacking as Vendors Issue Updates

Anthropic Patches Git MCP Server Flaws Enabling Prompt-Injection RCE

Apple Urges iOS 26.2 Update as Agencies Recommend Weekly iPhone Power-Offs After WebKit Exploits

Researchers Exploit StealC Panel XSS to Expose Operations of ‘YouTubeTA’

Talos Ties Sitecore Zero-Day Intrusions to China-Linked UAT-8837

WhisperPair Flaw Exposes Fast Pair Audio Devices to Hijacking and Tracking

AWS Confirms CodeBuild Webhook Misconfigurations in Key Repositories, Reports No Exploitation

Cisco Releases Fix for AsyncOS Zero-Day Exploited on Secure Email Appliances

Hypixel Rolls Out Hytale Bug Bounty With Rewards Over $25,000

Fortinet FortiSIEM Flaw Under Active Exploitation After Public Exploit Release