Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 4, 2026

Critical PostgreSQL Flaw Exposes Decade-Old Weakness, Allowing Full Server Compromise

A vulnerability identified as CVE-2026-6471, nicknamed PostGREShell, gives attackers who can tap PostgreSQL's…

CVE & Exploits · Sep 4, 2026

Google pushes emergency Chrome update to fix actively exploited V8 zero‑day and dozen other bugs

Google has issued an emergency update for its Chrome browser after confirming that a high‑severity zero‑day flaw in the…

CVE & Exploits · Sep 4, 2026

VMware Releases Patches for Workstation and Fusion to Close Critical Host‑Escape Flaw

VMware has issued security updates for its flagship desktop virtualization products, Workstation and Fusion, addressing…

CVE & Exploits · Sep 4, 2026

Google Releases Chrome 152 Update to Fix Six Zero‑Day Flaws, Including Critical V8 Bug

Google has rolled out Chrome version 152, a security update that addresses a total of twelve vulnerabilities discovered…

CVE & Exploits · Sep 4, 2026

Malicious Steam Workshop Maps Exploit MECCHA CHAMELEON Flaw for Remote Code Execution

Security researchers have identified a vulnerability in the MECCHA CHAMELEON platform that allowed specially crafted…

CVE & Exploits · Sep 4, 2026

Chinese‑linked Hackers Deploy Commercial AI Tools to Automate Multi‑Nation Attacks

Threat‑intelligence firm Hunt.io has identified a new wave of cyber activity originating from actors speaking Mandarin…

CVE & Exploits · Sep 4, 2026

Critical Super Forms WordPress Plugin Vulnerability Exploited for Remote Code Execution

Security researchers have confirmed that a critical flaw in the Super Forms plugin for WordPress is being weaponized by…

CVE & Exploits · Sep 4, 2026

Human Judgment Takes Center Stage as AI Handles Routine Cybersecurity Tasks

Artificial intelligence is rapidly mastering many of the repetitive tasks that have traditionally consumed the bulk of…

CVE & Exploits · Sep 4, 2026

TP-Link Issues Firmware Fix After Archer AX55 Flaws Expose Users to Code Execution and Credential Theft

TP-Link has pushed out firmware updates addressing two security weaknesses discovered in the Archer AX55 v4 Wi‑Fi…

CVE & Exploits · Sep 4, 2026

Massive Scan Flood Targets WordPress Plugins After Critical Flaws Discovered

Security researchers have recorded more than 440,000 automated attempts to exploit two newly disclosed vulnerabilities…

CVE & Exploits · Sep 4, 2026

Google rolls out emergency patch for sixth active Chrome zero‑day of 2026

Google released a critical security update for its Chrome browser, addressing twelve separate vulnerabilities,…

CVE & Exploits · Sep 4, 2026

Researchers Reveal Microsoft 365 Direct‑Send Bypass That Lets Attackers Spoof Internal Emails Without Credentials

A security researcher collective known as GBHackers has disclosed a method for sending unauthenticated messages that…