Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 17, 2026

Check Point Issues Urgent Alert Over Critical Remote Code Execution Flaw

Check Point Software Technologies has released a high‑severity security advisory concerning a newly disclosed…

CVE & Exploits · Sep 17, 2026

Stealthy BambooToken Malware Leverages MQTT to Slip Past Defenses

Lumen Security has identified a new malware family dubbed BambooToken, which uses the MQTT messaging protocol to…

CVE & Exploits · Sep 16, 2026

Spanish Regulator Flags First Known AI‑Driven Data Breach as Autonomous Cyberattack Milestone

Spain's national data protection authority has been alerted to what appears to be the first documented case of a data…

CVE & Exploits · Sep 16, 2026

Critical Issabel Framework Bug Enables Remote Command Execution, Attackers Already Exploiting

A severe vulnerability in the Issabel Framework—a web interface that underpins many open‑source unified communications…

CVE & Exploits · Sep 16, 2026

Hackers Deploy PHP Webshells via WooCommerce Vulnerability in WordPress Sites

Security researchers have identified a coordinated campaign that leverages a critical flaw in a widely used WooCommerce…

CVE & Exploits · Sep 16, 2026

Coast Guard and FBI Conduct Joint Boardings of Foreign Vessels Over Cybersecurity Concerns

The U.S. Coast Guard, in coordination with the Federal Bureau of Investigation, boarded two foreign-flagged commercial…

CVE & Exploits · Sep 16, 2026

Google Fixes Critical Pixel Modem Flaw After Evidence of Targeted Exploits

Google has rolled out its September 2026 security update for Pixel smartphones, closing a high‑severity zero‑day…

CVE & Exploits · Sep 16, 2026

GhostCode Phishing Kit Leverages Microsoft Entra Device Enrollment to Bypass Token Revocation

Security researchers have identified a new phishing toolkit, dubbed GhostCode, that exploits Microsoft Entra's device…

CVE & Exploits · Sep 16, 2026

EU Leaders Call for Unified Action Against Rising Cyber and Sabotage Threats

European Commission President Ursula von der Leyen used her annual State of the Union speech in Strasbourg to warn that…

CVE & Exploits · Sep 16, 2026

Google Issues Patch for High‑Severity Pixel Modem Bug After Reports of Limited Wild Exploitation

Google announced a security update for its Pixel smartphones after confirming that a critical vulnerability in the…

CVE & Exploits · Sep 16, 2026

CISA Issues Guidance on 17 Active Directory Attack Vectors as Enterprises Brace for Identity Threats

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a new advisory warning that threat actors are…

CVE & Exploits · Sep 16, 2026

Apple rolls out iOS 27 and iPadOS 27 with massive security patch addressing 126 flaws

Apple announced the availability of iOS 27 and iPadOS 27, coupling the latest feature set with what the company…