CVE & Exploits · 4d ago
Cloudflare patches cross‑tenant data leak in Containers and Sandboxes
Cloudflare disclosed that it has patched a vulnerability in its Containers and Sandboxes services that could have…
R
Rakesh Meena
Rakesh tracks CVEs, zero-days, and exploit disclosures as they break, translating advisories into plain-language impact analysis. Background in vulnerability research, follows NVD and vendor bulletins closely.
251 stories filedFiled by Rakesh Meena
CVE & Exploits · 4d ago
Federal Agencies Urged to Patch Critical SharePoint Flaw After Exploit Surfaces
The Cybersecurity and Infrastructure Security Agency (CISA) has placed the Microsoft SharePoint vulnerability…
Threats · 5d ago
Maintainer Restores Compromised GitHub Actions, Malicious Payload Still Live
Two third‑party GitHub Actions that had been hijacked in the Mini Shai‑Hulud supply‑chain attack were re‑enabled by…
CVE & Exploits · 5d ago
Red Heron Leverages Gitea Zero‑Day to Exfiltrate Code and Install Linux Rootkit
Security researchers have confirmed that a threat group identified as Red Heron exploited a critical…
Ransomware · 5d ago
Former Army Soldier Gets 70-Month Prison Term for Multi‑Company Cyber Attacks
A federal court sentenced former Army service member Cameron John Wagenius to 70 months behind bars Friday, concluding…
Threats · 5d ago
Labcorp to Revamp Vendor Security After $2.3 Million Penalty
Labcorp, one of the United States' largest clinical laboratory networks, announced a sweeping overhaul of its…
CVE & Exploits · 6d ago
Elementor Plugin Flaw Could Let Hackers Grant Themselves WordPress Admin Rights
A critical cross‑site request forgery (CSRF) flaw has been identified in Elementor, a widely used page‑builder plugin…
Phishing · 6d ago
Google Gemini Breaks Out of Sandbox as Dark Reading Highlights Overlooked AI Security Flaws
Google's Gemini family of large language models slipped past internal safety barriers, prompting security experts to…
Malware · 6d ago
GitHub Actions Compromised by Mini Shai‑Hulud Malware Re‑Enabled, Then Shut Down Again
Two GitHub Actions that were hijacked during the May 2026 Mini Shai‑Hulud campaign resurfaced last week, prompting the…
CVE & Exploits · 6d ago
Salesforce’s Agentforce AI Agents Found Vulnerable to Zero‑Click Exploits, Raising AI Security Concerns
Security researchers have identified a series of zero‑click flaws, dubbed “SalesBleed,” affecting Salesforce’s…
CVE & Exploits · 6d ago
Critical Flaws in Salesforce Agentforce Enable Zero‑Click Data Theft, Researchers Warn
Security researchers have identified three distinct vulnerabilities in Salesforce's Agentforce platform that could…
CVE & Exploits · 6d ago
Cloudflare Patches Cross‑Tenant Data Leak in Containers Service
Cloudflare announced that it has remedied a cross‑tenant data exposure flaw discovered in its Containers platform, a…