Category
Vulnerabilities
- 59
- stories
- OCT 20
- latest
Critical PHP Flaws Disclosed, Patches Out Now
The two flaws are CVE-2026-109618 and CVE-2026-109619 and are said to affect PHP versions 5, 6, 7, and 8.
DENNIS FISHER · OCT 20 · 3 min
All Vulnerabilities
New Citrix NetScaler Issue Emerges
The vendor says this is a configuration-dependent issue rather than a failure of the security patches themselves.
Dennis Fisher · 3 min
Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw
Cisco “strongly recommends” customers apply a patch for a critical API authentication bypass that’s being exploited.
Lindsey O'Donnell-Welch · 1 min
Inside the Citrix NetScaler Zero Day Saga
This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.
Dennis Fisher · 1 min
Researchers Warn of Citrix NetScaler Exploitation
On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.
Dennis Fisher · 3 min
F5 CVE-2026-94127 Targeted in Active Attacks
This vulnerability allows for unauthenticated remote code execution and shows how a missing bounds check—a classic programming error.
Dennis Fisher · 2 min
MicroTik Routers Under Attack in New Campaign
Labeled “MikroTrick” by researchers at CERT Polska who discovered and disclosed six vulnerabilities in the software, the campaign targets devices with SSH services reachable from the public internet
Dennis Fisher · 3 min
Critical Artifactory Bug Under Attack
CVE-2026-82329 is a simple authentication bypass that can allow an attacker to get admin privileges quite easily
Dennis Fisher · 1 min
MLflow Bug Actively Exploited to Steal Credentials
This flaw allows remote, unauthenticated attackers to read sensitive data from internal network services or cloud metadata endpoints.
Dennis Fisher · 2 min
Exploits Target N-able CVE-2026-18577 Flaw
The vulnerability, which effectively provides unauthenticated administrative access to the RMM console, stems from two related security issues
Dennis Fisher · 3 minYour LLM Is Showing: New Data Finds Sharp Rise in Exposed AI Tools
Exposures of AI/LLM tools has risen by more than 60 percent over the last nine months.
Dennis Fisher · 2 minCritical SharePoint Bug Under Attack
The flaw (CVE-2026-50522) affects SharePoint Enterprise Server 2016 and 2019 as well as SharePoint Subscription service. Microsoft released the fix for this vulnerability on July 14.
Dennis Fisher · 1 min
Bug in Cursor Allows Simple RCE
This exploit occurs entirely in the background, requiring no user approval, dialogue prompts, or interaction.
Dennis Fisher · 3 min
Researchers Find New GhostApproval Bug in Many AI Coding Assistants
The bug is a modern twist on a Clinton-era piece of known Unix badness: following symbolic links.
Dennis Fisher · 4 min
Oracle Zero-Day Linked to Latest ShinyHunters Attacks
“Because this activity predates Oracle’s June 10, 2026 advisory, the vulnerability was exploited as a zero-day,” said Mandiant researchers.
Lindsey O'Donnell-Welch · 2 min
Anthropic Warns of LLMs’ Impact on (Already Shrinking) N-Day Exploit Gap
Anthropic researchers warned that modern AI tools are further intensifying the existing issue of threat actors creating N-day exploits.
Lindsey O'Donnell-Welch · 4 minCheck Point VPN Flaw Targeted by Ransomware Actors
The vulnerability is a critical one and Check Point Research said that it’s likely that the actor targeting the bug is a financially motivated group.
Dennis Fisher · 2 min
The Past is Always Present in Vulnerability Disclosure
Microsoft’s reaction to the Nightmare-Eclipse saga is raising memories of the worst days of the disclosure debate.
Dennis Fisher · 4 min