Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 22, 2026

CISA Flags Critical Zyxel Switch Vulnerability in Its Exploited Threat List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially placed a severe flaw affecting Zyxel's…

CVE & Exploits · Sep 22, 2026

Chinese‑language hackers leverage new WordPress flaws to pilfer government data in 29 nations

A cyber‑espionage group speaking Mandarin has taken advantage of two freshly disclosed WordPress vulnerabilities,…

CVE & Exploits · Sep 22, 2026

CISA Warns of Active Exploitation Targeting Three Linux Kernel Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent advisory on Thursday, stating that…

CVE & Exploits · Sep 21, 2026

New WordPress Core CSRF Bug ‘Click2Shell’ Enables Remote PHP Execution

A critical cross‑site request forgery (CSRF) flaw dubbed “Click2Shell” has been disclosed in the core of WordPress, the…

CVE & Exploits · Sep 21, 2026

Foreign Actors Breach Operational Systems of Two Colorado Water Providers Without Service Disruption

In late August, cybersecurity investigators identified that foreign threat actors infiltrated the operational…

CVE & Exploits · Sep 21, 2026

North Korean‑linked ‘Contagious Interview’ hack hits 30,000 devices, steals $10.7 million in crypto

A joint advisory released this week warns that a North Korean state‑sponsored group behind the so‑called Contagious…

CVE & Exploits · Sep 21, 2026

FBI Updates CJIS Security Policy, Raising Encryption and Scan Standards for Law‑Enforcement IT

The Federal Bureau of Investigation released version 6.1 of its Criminal Justice Information Services (CJIS) Security…

CVE & Exploits · Sep 21, 2026

Proof‑of‑Concept Tool Halts Windows Defender Updates, Raising DoS Concerns

A new proof‑of‑concept project dubbed BigDiskBuster has demonstrated the ability to stop Microsoft Defender from…

CVE & Exploits · Sep 21, 2026

Security Teams Alert to Three Actively Exploited Linux Kernel Flaws

Multiple security groups have issued an urgent advisory warning that three separate vulnerabilities in the Linux kernel…

CVE & Exploits · Sep 21, 2026

Cybercriminals Exploit Microsoft Teams Guest Chat to Mimic IT Support and Harvest Passwords

Cybercriminals are increasingly leveraging Microsoft Teams' external chat function to pose as corporate IT help desks,…

CVE & Exploits · Sep 21, 2026

Exim 4.100.1 Patch Closes Critical SMTP Smuggling and Memory Corruption Bugs

The maintainers of the open‑source mail transfer agent Exim have issued version 4.100.1, a security‑focused update that…

CVE & Exploits · Sep 21, 2026

Hackers Leverage TanStack Supply Chain Breach to Access Hundreds of CrowdSec Private Repos

Security researchers have confirmed that threat actors exploiting a recent supply‑chain compromise in the TanStack npm…