Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 18, 2026

Check Point Issues Emergency Patch for Critical Remote Code Execution Flaw

Check Point Software Technologies has released an emergency update that closes a critical vulnerability, catalogued as…

CVE & Exploits · Sep 18, 2026

Critical Remote‑Code Flaw Found in Check Point Security Management and Log Servers Prompts Broad Vendor Patch Effort

Security researchers have identified a critical vulnerability affecting Check Point's Security Management and Log…

CVE & Exploits · Sep 18, 2026

AI‑Driven RatHat Android Malware Exploits ADB to Preserve Access After Removal

Security analysts have identified a new Android threat named RatHat that can retain root‑level shell access even after…

CVE & Exploits · Sep 18, 2026

Steam Client Service Flaw Lets Windows Users Gain System-Level Access

A new proof‑of‑concept called "BrokenPipe" demonstrates that the Steam Client Service on Windows can be abused to…

CVE & Exploits · Sep 18, 2026

CISA Shifts From Weekly Bug Lists to Risk‑Driven Vulnerability Strategy

The Cybersecurity and Infrastructure Security Agency (CISA) announced it will discontinue its weekly vulnerability…

CVE & Exploits · Sep 18, 2026

Cisco Flags Back-to-Back Zero-Day Exploits, Urges Immediate Action on CVE‑2026‑76460

Cisco Systems announced Wednesday that it has identified a second actively exploited zero‑day vulnerability within a…

CVE & Exploits · Sep 18, 2026

AI Agents Roam the Web, but a Catastrophic Hack Is Not Inevitable

Security analysts are cautioning against the notion that the recent surge of autonomous AI agents on public networks…

CVE & Exploits · Sep 17, 2026

Unauthenticated Remote Code Execution Flaw Threatens Check Point Management Servers

A critical remote‑code execution vulnerability has been identified in Check Point Software Technologies' Security…

CVE & Exploits · Sep 17, 2026

Docker Sandbox Vulnerability Lets macOS Containers Access Any Host File

Docker disclosed a high‑severity flaw in its Docker Sandboxes implementation for macOS that could allow malicious code…

CVE & Exploits · Sep 17, 2026

CISA Shifts From Weekly Bulletin to Risk‑Based Vulnerability Prioritization

The Cybersecurity and Infrastructure Security Agency (CISA) announced it will discontinue its Weekly Vulnerability…

CVE & Exploits · Sep 17, 2026

Critical Heap Overflow in Unbound DNSSEC Validator Puts Resolvers at Remote‑Code Risk

A severe heap overflow has been identified in the DNSSEC validation component of the Unbound DNS resolver, affecting…

CVE & Exploits · Sep 17, 2026

Experts Offer Practical Methods to Test CVE Exploitability Ahead of Threat Actors

A new vulnerability identifier (CVE) has entered the public domain, prompting security teams to scramble for answers…