Technology ❯ Cybersecurity

Vulnerabilities

Software Vulnerabilities Zero-Day Exploits Remote Code Execution Exploits Zero-Day Vulnerabilities CVE Exploitation Known Exploited Vulnerabilities Authentication Bypass Software Security

Metabase Zero-Day Used to Gain Admin Access and Steal Customer Data

The flaw lets unauthenticated attackers seize administrator control of instances, exposing stored credentials and connected databases.

BTCPay Server Releases Emergency Patch as Critical Flaw Is Actively Exploited

Stories older than 24h

Apple Issues Out‑of‑Cycle macOS Fix for Screen Sharing Authentication Bypass

SQL Injection Used to Compile Khunt Toolkit Inside Oracle Database

Zbtlink Routers Ship With Built‑In Backdoor That Can Grant Unauthenticated Root Shells

Widespread Critical Flaws Found in Server Baseboard Management Controllers

Cisco Issues Emergency Patches for Two Dozen Networking and Management Flaws

WebKit Flaws Let iCloud Private Relay Reveal Users’ Real IP Addresses

Paperclip Flaws Let Attackers Execute Commands on Servers and Developer Machines

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

Fifteen Flaws in TP‑Link Omada ZTP Can Be Chained to Take Over Networks

Unit 42 Reveals Three Post‑Compromise ‘Pass‑ta‑key’ Attacks Targeting Google Passkeys

Samsung Details August 2026 Galaxy Security Patch With 56 Fixes

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

Google Removes ADK Workflows After Researchers Show Gemini Agent‑to‑Agent Privilege Escalation

Apple Caps Bug Reports After Surge of AI-Generated Submissions

INC Ransomware Dominates Exploitation of SonicWall SMA1000 Zero‑Days

DeepSeek Inside Hermes Used to Launch Autonomous Cyberattacks

Researchers Find and Microsoft Patches CosmosEscape Flaw in Azure Cosmos DB

JetBrains Patches Critical RCE in TeamCity On‑Premises