Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · 2d ago

Windows 11 KB5121003 & KB5120240 cumulative updates released

Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix…

CVE & Exploits · 2d ago

Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws

The security defects could be exploited for arbitrary code execution and denial-of-service. The post Adobe Urges…

CVE & Exploits · 2d ago

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no…

CVE & Exploits · 2d ago

The inconvenient truth about AI pentesting: someone has to check all the work

AI pentesting can flood teams with findings they cannot validate. The real challenge is managing “validation debt” as…

CVE & Exploits · 2d ago

Cisco Warns of Seven ClamAV Flaws, Two With Public PoCs

Cisco warns that seven ClamAV flaws affect Secure Endpoint Connector products, with two having public PoCs that could…

CVE & Exploits · 2d ago

Zoom Patches Zero-Click Code Execution Vulnerability

Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s…

CVE & Exploits · 2d ago

NIST wants to overhaul its vulnerability database for the AI age

The National Institute for Standards and Technology is looking for input on how to overhaul its vulnerability reporting…

CVE & Exploits · 2d ago

SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities

SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs. The post…

CVE & Exploits · 2d ago

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on…

CVE & Exploits · 2d ago

Plug & Pwn Attack Exploits Windows PnP to Gain SYSTEM Access With Zero Clicks

Security researchers Alejandro Hernando, also known as 0xedh, and Borja Martínez have unveiled a research project…

CVE & Exploits · 2d ago

Copeland XWEB Pro Vulnerabilities Let Attackers Gain Root Access and Manipulate Refrigeration Systems

Security researchers have discovered 23 vulnerabilities in Copeland’s XWEB Pro commercial refrigeration controllers,…

CVE & Exploits · 2d ago

Cisco warns of high-severity ClamAV flaws with public exploits

Cisco warned of two high-severity vulnerabilities affecting the Secure Endpoint Connector that allow threat actors to…