Vulnerabilities and CVEs

13:00 Patch

Post-Quantum Questions to Ask Your Vendors

CISA

13:00 Vulnerability

US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems

CISA

12:47 Exploited

Zyxel GS1900 Zero-Day: Patch 3 Fixes Bypassed Bug

CVE-2026-107441SOCRadar

12:02 Patch

Google puts new limits on AI agents that hunt threats and fix vulnerabilities

Help Net Security

11:56 Exploited

Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day

CVE-2026-107441SecurityWeek

11:15 Vulnerability

GhostMap Bug Leaves Android Phones Stuck in Reboot Loop

Infosecurity Magazine

11:00 Vulnerability

The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603

CVE-2025-53770CVE-2025-53771Kaspersky Securelist

10:45 Patch

SonicWall GMS Flaws Unpatched After End of Life

CVE-2026-109593CVE-2026-109594SOCRadar

10:18 Vulnerability

GhostMap Android flaw lets malicious app trigger persistent boot loop

BleepingComputer

09:55 Exploited

U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

08:06 Exploited

Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution

The Hacker News

07:10 Vulnerability

🏴☠️ Thegentlemen has just published a new victim : Hausarztpraxis Ries

ransomware.live

06:17 Exploited

Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says

CVE-2024-27834The Hacker News

06:00 Vulnerability

Private Vulnerability Testing for User Oversharing

arXiv cs.CR

06:00 Vulnerability

PIMROP: A Feasibility Study of Return-Oriented Programming on Commercial Processing-in-Memory Architectures

arXiv cs.CR

06:00 Vulnerability

Analysis of Local Open-Weight LLM Agents on Vulnerability-Reproduction Tasks

arXiv cs.CR

06:00 Vulnerability

Towards Early Warning of Real-World Vulnerabilities: An Evidence-Aware Decoupled Method for CVSS Vector Prediction Based on Unstructured Disclosures

arXiv cs.CR

05:31 Patch

OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

The Hacker News

05:29 Vulnerability

Apache Struts2 Tiles Plugin =6.3.0 Preparer Cache Vulnerabilities

Full Disclosure

23:26 Patch

Hackers exploited iOS and Android flaws to infect phones

Ars Technica