Security Intelligence
PaperCut NG/MF Zero-Day Vulnerabilities Chained in Active Attacks
On August 27, PaperCut disclosed active exploitation of, and released emergency updates for, vulnerabilities affecting...
Security Intelligence
New research raises questions around Log4j 2 LogEvent deserialization
New POC code demonstrates code execution against applications that deserialize serialized Apache Log4j 2 LogEvent...
Security Intelligence
Ubiquiti patches three critical UniFi vulnerabilities
Ubiquiti released patches on August 26, 2026 for three maximum-severity vulnerabilities affecting UniFi Protect, UniFi...
Security Intelligence
Oracle WebLogic Server flaw enables server takeover via T3 and IIOP
A critical vulnerability affecting Oracle WebLogic Server, CVE-2026-60702, could allow a low-privileged threat actor to...
Security Intelligence
Cisco patches critical vulnerabilities in Crosswork and Secure Workload
Cisco released updates on August 19, addressing nine vulnerabilities in Cisco Crosswork and Cisco Secure Workload,...
Security Intelligence
Critical GitLab vulnerability exploited days after disclosure
Exploitation attempts targeting a critical vulnerability affecting self-managed GitLab Community Edition and Enterprise...
Security Intelligence
Active exploitation of Zimbra Collaboration flaw
Active exploitation targets a Zimbra Collaboration SNMP flaw (CVE-2026-73570), allowing unauthenticated remote code...
Security Intelligence
Citrix NetScaler flaw exploited following POC release
Open-source reporting indicates a Citrix NetScaler flaw is being exploited in the wild following the release of public...
Security Intelligence
CISA flags actively exploited Ray vulnerability
Confirmed active exploitation of CVE-2025-62593, a critical Ray flaw that can allow remote code execution on systems...
Security Intelligence
Power Pages misconfigurations expose D365 data
Researchers reported exploitation attempts targeting a max-severity SAP Commerce Cloud vulnerability just three days...
Security Intelligence
Active exploitation of SAP Commerce Cloud vulnerability
Researchers reported exploitation attempts targeting a max-severity SAP Commerce Cloud vulnerability just three days...
Security Intelligence
Early exploitation attempts observed of GeoServer zero day
A new GeoServer zero day is already attracting internet-wide scanning and exploitation attempts, with hundreds of...