Latest news
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-70584 Windows Core Messaging Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-77499 Windows DHCP Server Denial of Service Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-72937 Windows Storage Port Driver Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-62697 Windows Push Notifications Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Cisco PSIRT
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
On October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed…
-
Vulnerabilities via Cisco PSIRT
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files…
- Advertisement
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-81352 Web Media Extensions Remote Code Execution Vulnerability
Updated product information in the Software Update table. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability
Added SQL software to the Security Updates table. Customers that are running supported version of SQL are encouraged to update to the indicated version to be protected…
-
Threat Intel via Infosecurity Magazine
ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads
Researchers at Forescout said the discovery shows how ClickFix is evolving from a delivery technique into full-blown cyber-criminal infrastructure
-
Threat Intel via Cisco Talos
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
This research was conducted jointly with Julian-Ferdinand Vögele of Recorded Future’s Insikt Group. Details of the joint research and presentation are available here…
-
Threat Intel via SecurityWeek
Virtual Event Today: Zero Trust Strategies Summit
This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : Trieschmann Dumala Architectural Group
architecture & design (US) · Florida, USA | The complete business email archive of the firm's principal: client correspondence, financial records and project…
-
Vulnerabilities via Cyble
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
This Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report covers two views of risk: what attackers tried against Cyble's global honeypot sensors, and…
-
Vulnerabilities via Chrome Releases
Chrome Beta for Android Update
Hi everyone! We've just released Chrome Beta 156 (156.0.8078.39) for Android. It's now available on Google Play.
-
Vulnerabilities via NCSC-NL
NCSC-2026-0427 [1.00] [M/H] Kwetsbaarheden verholpen in Ahsay AhsayCBS
Ahsay heeft kwetsbaarheden verholpen in AhsayCBS tot en met versie 10.3.2. De kwetsbaarheid met kenmerk CVE-2026-105133 heeft een CVSS-score van 7,3 en betreft…
-
Threat Intel via The Record
Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
The tech giant worked with Japan’s National Police Agency and healthcare cybersecurity organization Health-ISAC to obtain a U.S. court order seizing and redirecting…
-
Vulnerabilities via SOCRadar
Top RCE Vulnerabilities
Top RCE Vulnerabilities A remote code execution (RCE) vulnerability is a software flaw that lets an attacker run their own code on a target system from a remote…
-
Threat Intel via BleepingComputer
Global takedown hits network behind 1 billion phishing messages
A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law…