Vulnerabilities Chrome Has Another Zero-Day. This One Is Already Being ExploitedSeptember 9, 2026September 9, 20264 mins
Vulnerabilities SAP GUI Can Be Turned Into a Command Runner From a Rogue BackendSeptember 9, 20264 mins
Vulnerabilities PEEP Turns Chrome Into a Backdoor — The Browser Is Now the RATSeptember 9, 20264 mins
Vulnerabilities SAP NetWeaver Has a 9.8 Pre-Auth RCE. The Message Server Is the DoorSeptember 9, 2026September 9, 20263 mins
Vulnerabilities FreeIPA Just Lost Its Front Door. Anonymous LDAP Can Become AdminSeptember 9, 20265 mins
Vulnerabilities 220 Million Traveler Records Were Left Behind With Default CredentialsSeptember 8, 2026September 8, 20264 mins
Vulnerabilities Your LG TV May Be Watching the Network Even When the Screen Is OffSeptember 8, 2026September 8, 20265 mins
Vulnerabilities Logitech Got Hit Through Oracle. The Breach Was Never About the MouseSeptember 8, 20264 mins
Vulnerabilities Mathspace Left a CVSS 10 Bug Unpatched. 1 Million Records Walked OutSeptember 8, 20264 mins
Vulnerabilities BigBear Didn’t Break Microsoft 365. It Just Stole the Session After MFASeptember 8, 20264 mins
Vulnerabilities Telerik’s Padding Oracle Just Became an RCE — And the Exploit Is PublicSeptember 7, 20265 mins
Vulnerabilities Coder’s Registry Was Hijacked. The Malicious Terraform Modules Stole the KeysSeptember 7, 20264 mins
Vulnerabilities N-able N-central Has a CVSS 10 RCE. No Login RequiredSeptember 7, 2026September 7, 20263 mins
Vulnerabilities ConnectWise Wants You to Disable File Transfers Before the Patch ExistsSeptember 7, 20262 mins
Vulnerabilities A Missed Patch Exposed Data From More Than a Million StudentsSeptember 7, 2026September 7, 20262 mins
Vulnerabilities JSCeal Doesn’t Need Your Google Password. It Steals the Session InsteadSeptember 7, 2026September 7, 20262 mins
Vulnerabilities Panzer Ransomware Is Already Claiming Victims Across 11 CountriesSeptember 6, 2026September 6, 20262 mins
Vulnerabilities PostGREShell Turns a Replication Account Into a Database BackdoorSeptember 6, 2026September 6, 20262 mins
Vulnerabilities MikroTik RouterOS Is Under Active Attack — MikroTrick Can Take Over the RouterSeptember 6, 20262 mins
Vulnerabilities Docker’s AuthZ Can Be Bypassed With an Oversized API RequestSeptember 6, 2026September 6, 20262 mins
Vulnerabilities TVING Lost 39.5 Million Accounts After Ignoring a Known Security ProblemSeptember 6, 2026September 6, 20262 mins
Vulnerabilities OpenAI Agents Hijacked a Wiki and Posted 18,000 MessagesSeptember 6, 2026September 6, 20263 mins
Vulnerabilities Iranian Hackers Are Going After PLCs Inside US Critical InfrastructureSeptember 6, 20263 mins
Vulnerabilities Magento Has Another Zero-Day — and Attackers Are Already Backdooring StoresSeptember 6, 20265 mins
Vulnerabilities Aim’s ML Tracking Server Will Call Almost Anything You AskSeptember 5, 2026September 5, 20265 mins
Vulnerabilities IBM Decision Manager Has a SQL Injection That Ends in a WebshellSeptember 5, 2026September 5, 20264 mins
Vulnerabilities TEN Framework Left Its AI Agent Host With an Unauthenticated File APISeptember 5, 2026September 5, 20264 mins
Vulnerabilities Fastify’s Middleware Can Be Bypassed With One Weird HTTP RequestSeptember 5, 2026September 5, 20263 mins
Vulnerabilities Fire Ant Took the Routers. Then It Started Lying to the LogsSeptember 4, 2026September 4, 20266 mins
Vulnerabilities Silver Fox Is Turning Fake Downloads Into Persistent Windows BackdoorsSeptember 4, 2026September 4, 20267 mins
Vulnerabilities Storm Claims an Aerospace Supplier. The Leaked Samples Are Already InterestingSeptember 4, 20266 mins
Vulnerabilities PostgreSQL Had a 12-Year-Old Backdoor Hiding Behind ReplicationSeptember 4, 2026September 4, 20266 mins
Vulnerabilities NodeStealer Stopped Stealing Accounts. Now It Watches the VictimSeptember 4, 20267 mins
Vulnerabilities Microsoft 365 RejectDirectSend Has an Empty-Envelope ProblemSeptember 4, 2026September 4, 20265 mins
Vulnerabilities SUPER FORMS IS BEING HACKED WITH AN UNAUTHENTICATED PHP UPLOADSeptember 4, 2026September 4, 20263 mins
Vulnerabilities QR Code Phishing Got So Bad Microsoft Teams Is Starting to Hide ThemSeptember 4, 20266 mins
Vulnerabilities Trezor Said the Old Customer Data Was Deleted. Another 67,000 Records Just Proved OtherwiseSeptember 4, 20267 mins
Vulnerabilities Chrome Just Patched Another Zero-Day. Attackers Were Already Using ItSeptember 4, 2026September 4, 20265 mins
Vulnerabilities VantaCore Built Its Own Ransomware Stack — Then Started Hunting Russian NetworksSeptember 4, 2026September 4, 20265 mins
Vulnerabilities Berlin Has Until Today Before Rhysida May Dump 5.7 TB of Stolen Government DataSeptember 4, 20264 mins
Vulnerabilities TVING Lost 39.5 Million Accounts Because Its Developers Left the Keys in the CodeSeptember 4, 20265 mins
