Hackers combined PHP2Shell vulnerabilities with a Linux kernel exploit to gain root access on 25 servers across the United ...

WatchGuard disclosed seven critical Fireware OS flaws enabling code execution, root-level actions, and memory corruption.

Fortinet’s FortiAIGate secures Oracle Cloud AI workloads by inspecting prompts, preventing data leaks, and controlling agent ...

WordPress released version 7.1.4 on October 28, 2026, fixing 22 security flaws, including an unauthenticated remote code ...

A leak of records covering more than 41,000 Department of Homeland Security employees and contractors has exposed contact details, work assignments, and links to sensitive operations, including ...

Veeam patched a critical authorization bypass flaw enabling unauthenticated access to its CDP Coordinator Service.

FortiBleed 2.0 exposed 40,573 cleartext secrets in FortiGate configurations, including VPN passwords and Active Directory ...

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...

Anthropic's Frontier Red Team says an unreleased Claude research model wrote working exploit chains for Chrome, Safari, ...

Sony reported a data breach exposing 2.58 million So-net and plala customer records through unauthorized database access.

CISA added two actively exploited PHP2Shell vulnerabilities to its KEV catalog for enabling unauthenticated remote code ...

The talk is a direct challenge to a position Telegram took in March. Trend Micro's Zero Day Initiative (ZDI) had reported a ...