Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 19, 2026

Critical Cisco ISE Zero-Day Lets Attackers Slip Past Authentication

A newly disclosed vulnerability identified as CVE-2026-76460 grants unauthenticated attackers the ability to bypass…

CVE & Exploits · Sep 18, 2026

Researcher Publishes Exploit Code for Four Recently Patched Linux Kernel Vulnerabilities

A security researcher has made public working exploit code targeting four distinct flaws in the Linux kernel that allow…

CVE & Exploits · Sep 18, 2026

AI-Powered Audit Uncovers Critical Vulnerability in Widely Used Decoder Tool

Security researchers have leveraged two leading artificial‑intelligence coding assistants—Anthropic's Claude and…

CVE & Exploits · Sep 18, 2026

Helpfeel Alerts Gyazo Users After Massive Data Breach Affects 23 Million Accounts

Japanese software firm Helpfeel disclosed that a security incident has compromised the personal data of approximately…

CVE & Exploits · Sep 18, 2026

WordPress patches critical “Click‑to‑Shell” bug that could auto‑install themes and enable code execution

WordPress released a set of security updates on Tuesday aimed at closing a newly discovered flaw in its core code that…

CVE & Exploits · Sep 18, 2026

Gyazo breach exposes over 23 million user records

Gyazo, the popular image‑sharing service, confirmed that a server‑side vulnerability was exploited by unknown…

CVE & Exploits · Sep 18, 2026

North Korean Hackers Pose as AI Recruiters to Plunder Job Seekers' Crypto and Data

U.S. and allied security agencies issued a joint alert this week warning that cyber actors linked to North Korea are…

CVE & Exploits · Sep 18, 2026

Microsoft Issues Critical Patch for Azure AI Foundry Privilege‑Escalation Bug

Microsoft announced on Tuesday that it has deployed security updates to address a critical vulnerability in its Azure…

CVE & Exploits · Sep 18, 2026

Hacktron Researchers Net Bug Bounty After Exploiting Sign‑In Flaw to Access OpenAI’s Internal Code

Security researchers from the Hacktron group have been awarded a bug bounty after demonstrating that a combination of…

CVE & Exploits · Sep 18, 2026

Gyazo Service Breach Exposes Data of 23 Million Users

Helpfeel, the company behind the popular image‑sharing tool Gyazo, announced that a security incident has compromised…

CVE & Exploits · Sep 18, 2026

Microsoft Secures Azure and AI Services with Patch for 18 Flaws

Microsoft has released a security update that addresses 18 separate vulnerabilities across its Azure cloud platform and…

CVE & Exploits · Sep 18, 2026

Supply‑Chain Breach: 13 npm Modules Distribute New “WeaselBiscuit” Chrome Extension Data Stealer

Cybersecurity analysts have identified a coordinated campaign that leverages thirteen separate npm packages to deliver…