Microsoft 365 Copilot SearchLeak Patched
Microsoft 365 Copilot SearchLeak Patched CVE-2026-42824 in M365 Copilot could have exposed emails, files, calendars, and MFA codes through a trusted link....
PeopleSoft Zero-Day Hits University Systems
PeopleSoft Zero-Day Hits University Systems Attackers exploited Oracle PeopleSoft CVE-2026-35273, a remotely exploitable flaw that can expose reachable...
npm v12 Locks Down Install Scripts
npm v12 Locks Down Install Scripts GitHub says npm v12 will stop dependency install scripts from running by default, reducing a major supply-chain code-...
Microsoft’s Record Patch Tuesday
Microsoft’s Record Patch Tuesday Microsoft’s June 2026 Patch Tuesday fixes 206 flaws, including three publicly disclosed zero-days and critical RCE bugs....
Chrome V8 Zero-Day Patch Alert
Chrome V8 Zero-Day Patch Alert Google patched CVE-2026-11645, an actively exploited Chrome V8 out-of-bounds read/write flaw. Update Chrome now and verify...
Check Point VPN zero-day exploited
Check Point VPN zero-day exploited Check Point warns CVE-2026-50751 is being exploited against legacy IKEv1 Remote Access VPN setups, letting attackers start...
Cisco SD-WAN Root Zero-Day Under Attack
Cisco SD-WAN Root Zero-Day Under Attack Cisco says CVE-2026-20245 in Catalyst SD-WAN Manager is being exploited to turn netadmin access into root and push...
Android June Patch Closes Targeted Framework Flaw
Android June Patch Closes Targeted Framework Flaw Google’s June 2026 Android update fixes 124 flaws, including CVE-2025-48595, a Framework privilege-...
Redis RCE Flaw Found by AI Tool
Redis RCE Flaw Found by AI Tool Redis patched CVE-2026-23479, a use-after-free that could let authenticated users run code on self-managed servers. Upgrade...
Cisco SD-WAN Admin Bypass Under Active Exploitation
Cisco SD-WAN Admin Bypass Under Active Exploitation Cisco patched CVE-2026-20182, an actively exploited Catalyst SD-WAN authentication bypass that could let...
WP Maps Pro Flaw Opens Admin Door
WP Maps Pro Flaw Opens Admin Door Attackers are actively exploiting WP Maps Pro CVE-2026-8732 to create WordPress administrator accounts on vulnerable sites....
Marimo RCE Turns AI Agents Into Intruders
Marimo RCE Turns AI Agents Into Intruders Attackers exploited Marimo CVE-2026-39987 on an exposed notebook, then used an LLM agent to chase cloud...
FortiClient EMS Flaw Abused to Push Credential Stealers
FortiClient EMS Flaw Abused to Push Credential Stealers Attackers are exploiting FortiClient EMS CVE-2026-35616 to abuse trusted endpoint management and push...
SharePoint RCE Patch Closes Site Member Risk
SharePoint RCE Patch Closes Site Member Risk Microsoft patched SharePoint CVE-2026-45659, an Important RCE flaw that could let a low-privilege site member...
Ghost CMS ClickFix Poisoning Hits 700+ Sites
Ghost CMS ClickFix Poisoning Hits 700+ Sites Attackers exploited Ghost CMS CVE-2026-26980 to steal admin API keys and inject ClickFix scripts into 700+...
Megalodon CI/CD attack hits thousands of GitHub repos
Megalodon CI/CD attack hits thousands of GitHub repos Megalodon pushed malicious GitHub Actions workflow commits into 5,561 repositories, risking exposed CI...
Microsoft Defender zero-days under active exploit
Microsoft Defender zero-days under active exploit Microsoft says Defender flaws CVE-2026-41091 and CVE-2026-45498 are being exploited, risking SYSTEM...
GitHub Probes Employee Device Breach
GitHub Probes Employee Device Breach GitHub says a poisoned VS Code extension on an employee device exposed about 3,800 internal repositories. The practical...
Nx Console Extension Stealer Hits Developers
Nx Console Extension Stealer Hits Developers A compromised Nx Console 18.95.0 VS Code extension ran a credential stealer when developers opened workspaces,...
MiniPlasma Windows Zero-Day Revives Old Cloud Files Flaw
MiniPlasma Windows Zero-Day Revives Old Cloud Files Flaw MiniPlasma reportedly revives CVE-2020-17103 in Windows cldflt.sys, letting local attackers gain...