vulnerability

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

April 29, 2026

Attackers are exploiting CVE-2026-32202, a zero-click Windows Shell spoofing vulnerability that causes victims’ systems to authenticate the attacker’s server, CISA …

Apple fixes iPhone bug that let FBI retrieve deleted Signal messages(CVE-2026-28950)

April 23, 2026

Apple has rolled out security updates for iPhones and iPads that fix CVE-2026-28950, a logging issue in Notification Services that made devices unexpectedly retain …

Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876)

April 22, 2026

Progress Software has fixed a slew of high-severity vulnerabilities in MOVEit WAF and LoadMaster, including a flaw (CVE-2026-21876) that may allow attackers to bypass firewall …

Fortinet fixes critical FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808)

April 16, 2026

Two vulnerabilities (CVE-2026-39813, CVE-2026-39808) in FortiSandbox could be leveraged by unauthenticated attackers to bypass authentication and execute unauthorized code or …

Tails 7.6.2 patches vulnerability that could expose saved files

April 16, 2026

The Tails Project released Tails v7.6.2, an emergency release of the popular open source secure portable operating system. What is Tails? Tails, which is based on Debian …

Claude helps researcher dig up decade-old Apache ActiveMQ RCE vulnerability (CVE-2026-34197)

April 9, 2026

In the latest demonstration of how AI assistants can help with bug hunting, Horizon3.ai researcher Naveen Sunkavally used Claude to unearth CVE-2026-34197, a remote code …

Anthropic’s new AI model finds and exploits zero-days across every major OS and browser

April 8, 2026

Automated vulnerability discovery tools have existed for decades, and the gap between finding a bug and building a working exploit has always slowed attackers. That gap is now …

Cisco IMC auth bypass vulnerability allows attackers to alter user passwords (CVE-2026-20093)

April 3, 2026

Cisco has fixed ten vulnerabilities affecting its Integrated Management Controller (IMC), the most critical of which (CVE-2026-20093) could allow an unauthenticated, remote …

Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)

March 30, 2026

A critical SQL injection vulnerability (CVE-2026-21643) in Fortinet FortiClient Endpoint Management Server (EMS), a management server for FortiClient endpoint agents on …

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)

March 28, 2026

A critical unauthenticated remote code execution vulnerability (CVE-2025-53521) in F5’s BIG-IP Access Policy Manager (APM) solution is under active exploitation, the US …

CISA sounds alarm on Langflow RCE, Trivy supply chain compromise after rapid exploitation

March 27, 2026

The US Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-33017, a recently …

Critical NetScaler ADC, Gateway flaw may soon be exploited (CVE-2026-3055)

March 24, 2026

Citrix has fixed two vulnerabilities in NetScaler ADC and NetScaler Gateway, with the more serious flaw (CVE-2026-3055) potentially allowing attackers to extract active …