CVE Tools
Track your stack

Security news, decoded.

74 stories in the last 7 days, naming 204 CVEs; 60 of those CVEs are in CISA KEV.

RSS feed

The wire

Page 33 of 36 · newest first · times in UTC

Monday, Jun 88 stories

  1. Kaspersky Securelist
    Hacktivists are broadening their scope beyond political motivationIncident4BID
  2. SecurityWeek
    SolarWinds Serv-U Vulnerability Exploited in the WildReported exploitedServ-U
  3. Daily CyberSecurity (securityonline.info)
    Broadcom Fixes Critical VMware Stored XSS BugsPatchVMware Cloud Foundation Operations
  4. Daily CyberSecurity (securityonline.info)
    Shopper Laravel Flaw Exploit Sparks Urgent E-Commerce Security WarningPatchShopper Laravel (admin panel)
  5. Daily CyberSecurity (securityonline.info)
    Critical Sitefinity Vulnerabilities: CVSS 10.0 Security AlertAdvisoryProgress Sitefinity
  6. Daily CyberSecurity (securityonline.info)
    Collibra Platform Agent Flaws Allow Remote Code Execution Without AuthenticationPatchCollibra Platform Agent
  7. Daily CyberSecurity (securityonline.info)
    Weekly Threat Intelligence: June 1 to June 7, 2026Reported exploitedCISA
  8. Daily CyberSecurity (securityonline.info)
    Critical Cloud Foundry Key Disclosure Bug Exposes JWT Signing KeysPatchCloud Foundry UAA

Sunday, Jun 73 stories

  1. Daily CyberSecurity (securityonline.info)
    Millions of Servers At Risk: Crucial MariaDB Flaw Carries Maximum 10.0 CVSS ScoreReported exploitedMariaDB
  2. Daily CyberSecurity (securityonline.info)
    Critical Cordova Vulnerability Threatens iOS App Data BoundariesPatchApache Cordova InAppBrowser plugin
  3. BleepingComputer
    C0XMO botnet spreads via DD-WRT router flaw, kills rival malwareResearchDD-WRT router firmware

Saturday, Jun 65 stories

  1. BleepingComputer
    Critical Everest Forms Pro flaw exploited to take over WordPress sitesReported exploitedEverest Forms Pro
  2. The Hacker News
    CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV CatalogReported exploitedSolarWinds Serv-U
  3. The Hacker News
    AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 BugsPoC publicFFmpeg
  4. The Hacker News
    Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch AvailableReported exploitedCisco Catalyst SD-WAN Manager (vManage/SD-WAN vManage)
  5. Daily CyberSecurity (securityonline.info)
    CISA Warns of Actively Exploited SolarWinds Serv-U FlawReported exploitedSolarWinds Serv-U

Friday, Jun 58 stories

  1. BleepingComputer
    CISA: Hackers now exploit SolarWinds Serv-U flaw to crash serversReported exploitedSolarWinds Serv-U
  2. Rapid7 Blog
    Metasploit Wrap-Up 05-06-2026PoC publicApache ActiveMQ
  3. Bishop Fox
    Popping Root on UniFi OS Server: Unauthenticated RCE Chain Detection & AnalysisResearchUniFi OS Server
  4. SecurityWeek
    Chrome 149 Patches 429 VulnerabilitiesPatchChrome 149
  5. The Hacker News
    Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over SitesReported exploitedEverest Forms Pro (WordPress plugin)
  6. BleepingComputer
    Cisco warns of unpatched SD-WAN zero-day exploited in attacksReported exploitedCisco Catalyst SD-WAN Manager (SD-WAN vManage)
  7. SecurityWeek
    Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026Reported exploitedCisco Catalyst SD-WAN Manager (CLI)
  8. Palo Alto Unit 42
    Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257Reported exploitedPAN-OS

Thursday, Jun 44 stories

  1. The Hacker News
    Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes PublicPoC publicCisco Unified Communications Manager (Unified CM)
  2. The Hacker News
    ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories
  3. SecurityWeek
    Mirasvit Vulnerability Exploited to Execute Code on Magento ServersReported exploitedMirasvit Full Page Cache Warmer for Magento 2
  4. BleepingComputer
    Cisco warns of critical Unified CM flaw with PoC exploit codePoC publicCisco Unified Communications Manager (Unified CM)

Wednesday, Jun 37 stories

  1. BleepingComputer
    New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minutePoC publicHTTP/2 implementations (nginx, Apache httpd, Envoy, IIS, Cloudflare Pingora)
  2. Dark Reading
    Coding Gaffe Exposes Microsoft 365 Accounts to Widespread TakeoverPatchMicrosoft 365 Android apps (Word, Excel, PowerPoint, OneNote, Loop)
  3. The Hacker News
    Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)PoC publicRedis
  4. The Hacker News
    CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV CatalogReported exploitedMirasvit Full Page Cache Warmer for Magento 2
  5. The Hacker News
    Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug FlagPoC publicMicrosoft 365 Copilot for Android
  6. The Hacker News
    Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 HashesResearchWindows URI handler (search:)
  7. The Hacker News
    New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & CloudflarePoC publicNGINX

Tuesday, Jun 23 stories

  1. The Hacker News
    Google June 2026 Android Update Patches 124 Flaws, One Actively ExploitedReported exploitedAndroid Framework
  2. The Hacker News
    Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against UkraineReported exploitedWinRAR
  3. The Hacker News
    Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active ExploitationReported exploitedOracle WebLogic Server

Monday, Jun 12 stories

  1. Dark Reading
    Microsoft's Zero-Day Legal Threats Spark BacklashReported exploitedWindows Defender
  2. Check Point Research
    1st June – Threat Intelligence ReportRoundupShinyHunters

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store