More than 1,300 internet-exposed Microsoft SharePoint servers remain vulnerable to ongoing intrusions weaponizing the zero-day spoofing flaw,...
vulnerability-management
Security Affairs reports that vulnerable end-of-life D-Link DIR-823X routers impacted by the command injection flaw, tracked as...
The vulnerability stems from a regression in specific versions of the Microsoft.AspNetCore.DataProtection NuGet packages.
The vulnerability, identified as CVE-2026-28950, was patched on April 22, 2026, in iOS 26.4.2 and iPadOS 26.4.2,...
A BeyondTrust report found a twofold increase in critical flaws in Microsoft software despite a 6% drop...
Active intrusions exploiting the high-severity Apache ActiveMQ code injection flaw, tracked as CVE-2026-34197, could compromise 6,476 internet-exposed...
Attackers could have extracted a GITHUB_TOKEN secret, potentially enabling unauthorized changes.
SecurityWeek reports that Forescout Technologies identified 20 new vulnerabilities in Sliex and Lantronix serial-to-IP converters, or serial...
CISA flags new Cisco SD-WAN flaw amid active exploit chains, urging rapid patching.