Security Intelligence
Roundcube Webmail SQL injection vulnerability exploited
Active exploitation has been reported for CVE-2026-48842, a high-severity SQL injection vulnerability affecting...
Security Intelligence
WordPress exploitation attempts observed hours after security update
Exploitation attempts targeting CVE-2026-87902 began within hours of the September 22 release of WordPress 7.1.2, with...
Security Intelligence
WordPress 7.1.1 fixes two paths to shell
WordPress 7.1.1 fixes 11 flaws, including Click2Shell and Comment2Shell which can be leveraged to execute...
Security Intelligence
F5 Fixes Actively Exploited BIG-IP APM Vulnerability
F5 patched an actively exploited BIG-IP APM vulnerability that lets attackers gain unauthenticated remote code...
Security Intelligence
Gyazo Breach Exposes User Data and Image Metadata Records
Exploitation of a Gyazo image upload server flaw exposed searchable OCR text from screenshots, raising risk for...
Security Intelligence
Critical extended Passport flaw impacts SAP systems
SAP patched a critical vulnerability in a widely used SAP request-tracing feature that researchers report can lead to...
Security Intelligence
Cisco patches actively exploited authentication bypass in ISE
An actively exploited authentication bypass vulnerability in Cisco ISE and ISE-PIC allows remote, unauthenticated...
Security Intelligence
Exploitation attempts target WSO2 authentication bypass vulnerability
Attempts observed to exploit a max-severity flaw in WSO2's API management platform, which organizations use to...
Security Intelligence
Cisco Secure Email Gateway zero-day exploited to gain root access
Cisco disclosed and patched an actively exploited vulnerability in Cisco Secure Email Gateway that allows root-level...
Security Intelligence
Mass-scanning activity targets exposed Vite development servers
An internet-wide scanning activity is targeting internet-exposed Vite development servers to retrieve credentials,...
Security Intelligence
GitLab fixes critical vulnerability as internet-wide probing begins
GitLab released fixes for CVE-2026-85706 in versions 19.1.8, 19.2.6, and 19.3.2. The vulnerability affects self-managed...
Security Intelligence
Check Point patches two critical VPN certificate processing vulnerabilities
Check Point patched two critical vulnerabilities (CVSS: 9.8) affecting Quantum Security Gateway, Security Management...