Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 8, 2026

Bimbo Bakeries USA Discloses Zero-Day Hack That Exposed Social Security Numbers

Bimbo Bakeries USA, the U.S. arm of the world’s largest bakery, announced that a cyberattack succeeded in extracting…

CVE & Exploits · Sep 8, 2026

Mathspace breach exposes data of more than a million students and school staff in Australia and New Zealand

Mathspace, the digital mathematics learning service adopted by many schools across Australia and New Zealand, announced…

CVE & Exploits · Sep 7, 2026

New Chromium-Based Toolkit ‘PEEP’ Turns Browsers Into Stealthy Command Execution Backdoors

Cybersecurity researchers have detailed a sophisticated post‑exploitation framework called PEEP that covertly…

CVE & Exploits · Sep 7, 2026

Active Exploits Target Magento and Adobe Commerce with New “StyleSmuggler” Zero‑Day

A newly disclosed vulnerability, dubbed StyleSmuggler, is being weaponized against online stores that run Magento or…

CVE & Exploits · Sep 7, 2026

Zero-Day 'StyleSmuggler' Exploited to Install Linux Backdoor Across Magento and Adobe Commerce Sites

A previously unknown vulnerability identified as "StyleSmuggler" is being weaponized in the wild to implant a…

CVE & Exploits · Sep 7, 2026

Phishing-as-a-Service Tool Evades MFA, Compromising Thousands of Microsoft 365 Accounts Across Hundreds of Firms

A malicious service dubbed BigBear 2.0 has been linked to the theft of more than 5,000 Microsoft 365 credentials after…

CVE & Exploits · Sep 7, 2026

Researcher Unveils GreenSection PoC Exploiting Nvidia Memory Corruption Flaw

Security researcher known by the aliases Chaotic Eclipse, INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse has…

CVE & Exploits · Sep 7, 2026

PoisonedRefresh Malware Exploits BIG‑IP APM Flaw to Install Memory‑Only PHP Web Shells

A sophisticated Linux‑based implant dubbed "PoisonedRefresh" has been observed infiltrating F5 BIG‑IP Access Policy…

CVE & Exploits · Sep 7, 2026

N-able Issues Emergency Patch for Critical CVE-2026-86218 Remote Code Execution Flaw

N-able has rolled out an emergency hotfix to remediate CVE-2026-86218, a remote code execution flaw that the company…

CVE & Exploits · Sep 7, 2026

Nightmare Eclipse Unveils Critical Zero-Day Exploits Affecting CrowdStrike, Nvidia and Avast

A hacker collective identifying itself as Nightmare Eclipse has published proof‑of‑concept code that exploits…

CVE & Exploits · Sep 7, 2026

Active Exploitation of Adobe Commerce ‘StyleSmuggler’ Zero‑Day Puts Thousands of Online Stores at Risk

Security researchers have confirmed that a previously unknown vulnerability in Adobe Commerce and its Magento variant…

CVE & Exploits · Sep 7, 2026

Security Researchers Reveal Unauthenticated RCE Chain in Telerik UI, Vendor Issues Patch

A proof-of-concept demonstrated by security firm TantoSec shows that a padding‑oracle vulnerability in Telerik UI for…