Security vulnerabilities remain the most common entry point for cyber attacks. This section tracks newly discovered CVEs, zero-day vulnerabilities, and actively exploited flaws affecting enterprise infrastructure, cloud environments, and software supply chains.
286 articles
CVE-2017-16740 is a high-severity flaw in Rockwell Automation PLCs, exposing critical infrastructure to remote manipulation. Patch or isolate affected devices immediately.
Cisco has released urgent patches for CVE-2026-20303 and related critical vulnerabilities in SD-WAN and IOS XE, with CVSS scores up to 9.9. Immediate patching is required to prevent remote code execution and privilege escalation.
CVE-2024-24919, CVE-2024-8190, CVE-2024-8963, CVE-2024-9380, CVE-2025-31161, and CVE-2026-1731 are critical vulnerabilities exploited by the QTFY group for espionage and credential theft. Immediate patching is required to prevent persistent compromise.
CVE-2026-8452 is a critical unauthenticated remote code execution flaw in Citrix NetScaler ADC and Gateway, now exploited in the wild. Patch immediately to prevent system compromise.
CVE-2026-20349 is a critical zero-day in Cisco Secure Firewall ASA and FTD, enabling remote DoS via SSL VPN. Cisco urges immediate patching due to active exploitation.
CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415 are high-severity flaws in Zoom's annotation feature enabling remote code execution. Patch Zoom clients immediately.
CVE-2026-55040 is a high-severity SharePoint vulnerability enabling remote, unauthenticated access and data modification. Patch immediately—exploitation is active.
CVE-2026-73570 is a critical Zimbra Collaboration Suite flaw enabling unauthorized access and user impersonation. CISA mandates urgent patching due to active exploitation since August 2026.
CVE-2026-68820 (high severity) enables remote code execution on Windows, exploited in the wild by Lazarus Group. Patch immediately to prevent full system compromise.
CVE-2026-20349 is a critical zero-day in Cisco Secure Firewall ASA and FTD, enabling remote unauthenticated denial-of-service. Cisco urges immediate patching.
CVE-2026-65400 is a high-severity flaw in macOS Screen Sharing allowing remote root access and cryptominer deployment. Patch immediately—active exploitation confirmed.
CVE-2007-3010, CVE-2016-6277, and 16 other CVEs are being actively exploited (high severity) by Evooo1Bot to turn Linux-based edge devices into SOCKS5 proxies. Patch all affected devices immediately to prevent compromise.