SonicWall SMA1000: Attacks on partly critical zero-day vulnerabilities

SonicWall warns of attacks on partly highly critical zero-day vulnerabilities in SMA1000 appliances. SonicWall offers a ...

Patchpocalypse Now: Microsoft tops last month's record with 622 Patch Tuesday CVEs

Remember last month when we were awed by Microsoft’s record-setting Patch Tuesday that addressed 206 CVEs? That was a quaint ...
Dark Reading

In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw

Attackers have begun actively exploiting a critical flaw in Cisco Unified Communications Manager (CUCM) to gain root access on vulnerable systems. The attacks appear to have begun less than 24 hours ...
Ars Technica

PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data

One of the world’s most active ransomware groups exploited a critical vulnerability in Oracle’s PeopleSoft software suite and used it to target about 100 customers and extort at least one of them to ...
techtimes

Cisco Unified CM SSRF Flaw CVE-2026-20230: Public Exploit Code Opens Path to Root

Cisco disclosed a critical server-side request forgery vulnerability in its Unified Communications Manager platform on Wednesday, and by Thursday morning working proof-of-concept exploit code was ...
Ars Technica

Millions of AI agents imperiled by critical vulnerability in open source package

Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to breach the servers running them and make off with sensitive data and ...
Redmond Magazine

Microsoft March Patch Tuesday: 8 Critical Bulletins and 2 Zero-Days

Microsoft March 2026 Patch Tuesday fixes 83 vulnerabilities across Windows, Office, SQL Server, Azure, and .NET. Two publicly disclosed zero-days hit .NET and SQL Server, but researchers say ...
Infosecurity-magazine.com

Researchers Reveal Six New OpenClaw Vulnerabilities

OpenClaw has patched six new vulnerabilities in its popular agentic AI assistant, covering server-side request forgery (SSRF), missing authentication and path traversal bugs, according to Endor Labs.
SiliconANGLE

Modern PDF platforms are becoming high-risk attack surfaces

Modern PDF platforms can now function as full attack gateways rather than passive document viewers. That’s according to a new report out today from artificial intelligence offensive security startup ...
CSOonline

CISA orders immediate patching as GeoServer flaw faces active exploitation

CISA is sounding the alarm over a critical vulnerability in GeoServer that is being actively exploited in the wild, ordering federal agencies to patch immediately. The flaw, tracked as CVE-2025-58360, ...
GitHub

A Server-side Request Forgery vulnerability was found in...

This score calculates overall vulnerability severity from 0 to 10 and is based on the Common Vulnerability Scoring System (CVSS). Attack vector: More severe the more the remote (logically and ...