CVE Tools
Track your stack

Security news, decoded.

74 stories in the last 7 days, naming 204 CVEs; 60 of those CVEs are in CISA KEV.

RSS feed

The wire

Page 34 of 36 · newest first · times in UTC

Monday, Jun 16 stories

  1. Dark Reading
    Patch Now: Another Palo Alto Auth Bypass Bug Under Active ExploitReported exploitedPAN-OS GlobalProtect portal
  2. The Hacker News
    ⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and MoreAdvisoryGogs
  3. Rapid7 Blog
    CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)PatchHP Poly VVX
  4. Rapid7 Blog
    CVE-2026-0826: How an Old Bug Can Feed AI-Powered ImpersonationResearchCVE-2026-0826 (HP Poly VVX/Trio)
  5. Kaspersky Securelist
    Containers on fire: from container escapes to supply chain attacksResearchContainers
  6. The Hacker News
    Critical WP Maps Pro Flaw Actively Exploited to Create Admin AccountsReported exploitedWP Maps Pro

Saturday, May 301 story

  1. The Hacker News
    PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active ExploitationReported exploitedPAN-OS

Friday, May 297 stories

  1. Rapid7 Blog
    Metasploit Wrap Up 05/29/2026RoundupMetasploit Framework
  2. The Hacker News
    ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing SurfaceAdvisoryChatGPT
  3. Rapid7 Blog
    Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)Reported exploitedPAN-OS
  4. The Hacker News
    Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 ExploitReported exploitedMarimo
  5. Bishop Fox
    Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557PatchUniFi Network Application
  6. Kaspersky Securelist
    What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security andResearchKaspersky Container Security
  7. Risky Business News
    Dutch police take down giant botnet of 17 million devicesReported exploitedAsocks

Thursday, May 284 stories

  1. The Hacker News
    Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential StealerReported exploitedFortiClient Endpoint Management Server (EMS)
  2. The Hacker News
    Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account RemovalReported exploitedMicrosoft Defender
  3. The Hacker News
    ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 MoreRoundupAzure Backup for AKS
  4. Rapid7 Blog
    Authenticated RCE via Argument Injection in Gogs (NOT FIXED)PoC publicGogs

Wednesday, May 274 stories

  1. Cisco Talos
    MediaArea heap-based buffer overflow vulnerabilitiesPatchMediaInfoLib
  2. OX Security
    Vibe Coding Security: Why 62% Of AI-Generated Code Ships With Vulnerabilities - OX SecurityResearchOX Platform
  3. OX Security
    The CVE Is Dead. Long live the Mythos Era. - OX SecurityResearchMythos
  4. Risky Business News
    BadHost vulnerability bypasses authentication on AI infrastructurePatchStarlette (BadHost, CVE-2026-48710)

Tuesday, May 263 stories

  1. Ars Technica (Security)
    Millions of AI agents imperiled by critical vulnerability in open source packagePatchStarlette
  2. Dark Reading
    Microsoft Issues Out-of-Band SharePoint PatchPatchSharePoint Server
  3. Check Point Research
    AI Threat Landscape Digest March-April 2026Reported exploitedClaude Code

Monday, May 252 stories

  1. Check Point Research
    25th May – Threat Intelligence ReportReported exploitedKali365
  2. Mandiant
    Exploitation of KnowledgeDeliver via ViewState Deserialization VulnerabilityIncidentKnowledgeDeliver

Friday, May 224 stories

  1. Rapid7 Blog
    Metasploit Wrap Up 05/22/2026PoC publicCisco Catalyst SD-WAN Controller
  2. Bishop Fox
    Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication BypassPatchPAN-OS
  3. Kaspersky Securelist
    Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payloadReported exploitedVBCloud
  4. Bishop Fox
    CVE-2026-27886: Unauthenticated Boolean-Oracle Exfiltration of Administrator Secrets in StrapiResearchStrapi

Wednesday, May 203 stories

  1. Qualys Security Blog
    CVE-2026-46333: Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel ptrace PathPoC publicLinux kernel
  2. Kaspersky Securelist
    How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)ResearchExifTool (macOS)
  3. ESET WeLiveSecurity
    Webworm: New burrowing techniquesReported exploitedWebworm

Tuesday, May 191 story

  1. Cisco Talos
    TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilitiesReported exploitedTP-Link Archer AX53

Monday, May 183 stories

  1. Check Point Research
    18th May – Threat Intelligence ReportReported exploitedLapsus$
  2. Kaspersky Securelist
    IT threat evolution in Q1 2026. Non-mobile statisticsReported exploitedKaspersky products
  3. Dark Reading
    Boulevard of Broken Dreams: 2 Decades of Cyber FailsRoundup

Friday, May 151 story

  1. Rapid7 Blog
    Metasploit Wrap-Up 05/15/2026PoC publicMetasploit Framework

Thursday, May 141 story

  1. Rapid7 Blog
    CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OSAdvisoryPAN-OS

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store