Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
286 articles
CVE-2025-20701 (critical) allows attackers within Bluetooth range to eavesdrop on Beats Studio Buds microphones without user consent. Patch immediately—Apple firmware update required.
CVE-2026-20253 is a critical Splunk Enterprise vulnerability enabling unauthenticated remote file creation/truncation, now under active exploitation. CISA requires patching by June 21, 2026.
CVE-2023-52271, CVE-2025-61155, and CVE-2025-1055 (high severity) enable stealthy C2 traffic via Microsoft Teams TURN relays. Immediate review and patching are critical.
CVE-2026-50656 is a high-severity zero-day in Microsoft Defender enabling SYSTEM-level privilege escalation. Patch ETA pending; immediate mitigation required.
CVE-2026-20266 and CVE-2026-20265 are critical Splunk AI Toolkit flaws (CVSS 9.1) enabling OS command injection and data exfiltration. Patch to 5.7.4 immediately.
CVE-2023-24932 (high severity) enables stealthy remote access on Windows via kernel-level malware. Active exploitation reported; patch immediately.
CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 are critical Fortinet FortiSandbox vulnerabilities (CVSS: critical) exploited for unauthenticated remote code execution. Immediate patching is mandatory.
CVE-2023-24932 (high severity) enables stealthy backdoor access on Windows via malicious kernel drivers, actively exploited by China-linked actors. Patch or isolate affected systems immediately.
CVE-2026-5027 is a high-severity RCE flaw in Langflow actively exploited since patch release. Immediate patching is critical to prevent system compromise.
CVE-2026-0257 is a high-severity authentication bypass in Palo Alto Networks PAN-OS GlobalProtect VPN, actively exploited since May 2026. CISA mandates immediate mitigation for federal agencies.
CVE-2025-8088 is a high-severity WinRAR vulnerability enabling remote code execution, actively exploited in 2026 by Russia-aligned APTs against Ukrainian government, military, and judicial entities. Patch immediately to prevent compromise.
CVE-2026-35273 is a critical Secure Boot bypass in outdated UEFI shim bootloaders, enabling early boot-phase code execution and persistent compromise. Immediate patching is essential.