U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog

1 week ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities…

Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)

1 week ago

Fortinet released fixes for a critical FortiOS SSO auth bypass (CVE-2026-24858) actively exploited, impacting FortiOS, FortiManager, and FortiAnalyzer. Fortinet started…

PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun

1 week ago

Koi researchers found “PackageGate” flaws in NPM, PNPM, VLT, and Bun that let attackers perform supply chain attacks and run…

WhatsApp rolls out Strict Account settings to strengthen protection for high-risk users

2 weeks ago

Meta announced new Strict Account Settings on WhatsApp to better protect high-risk users from advanced cyber attacks. Meta announced new…

Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed online

2 weeks ago

Shadowserver researchers found 6,000+ SmarterMail servers exposed online and likely vulnerable to a critical auth bypass flaw. Nonprofit security organization…

U.S. CISA adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

2 weeks ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known…

Amnesia RAT deployed in multi-stage phishing attacks against Russian users

2 weeks ago

A multi-stage phishing campaign targets users in Russia with ransomware and Amnesia RAT using fake business documents as lures. FortiGuard…

Dormakaba flaws allow to access major organizations’ doors

2 weeks ago

Researchers found over 20 flaws in Dormakaba access systems that could let attackers remotely unlock doors at major organizations. Researchers…

Emergency Microsoft update fixes in-the-wild Office zero-day

2 weeks ago

Microsoft issued emergency updates to fix an actively exploited Office zero-day, CVE-2026-21509, affecting Office 2016–2024 and Microsoft 365 Apps. Microsoft…

ShinyHunters claims 2 Million Crunchbase records; company confirms breach

2 weeks ago

Crunchbase confirms a data breach after cybercrime group ShinyHunters claims to have stolen over 2 million personal records. Crunchbase confirmed…

This website uses cookies.