Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · Sep 2, 2026

SonicWall Alerts Users to Active Exploitation of Two SMA1000 Zero‑Day Flaws

SonicWall has released an urgent advisory after confirming that two previously undisclosed vulnerabilities in its…

CVE & Exploits · Sep 2, 2026

Unpatched ownCloud Flaws Lead to Data Breach at Philippines Nuclear Agency

Cyber attackers have successfully infiltrated the Philippines' nuclear regulatory body by exploiting known…

CVE & Exploits · Sep 2, 2026

FBI Launches Investigation into Dark‑Web Marketplace Offering Millions of Driver’s License Scans

The Federal Bureau of Investigation has opened a probe into a newly emerged dark‑web service that is advertising…

CVE & Exploits · Sep 2, 2026

Critical JFrog Repository Manager Flaw Sparks Immediate Exploitation Attempts

A newly disclosed authentication bypass vulnerability identified as CVE-2026-82329 is already being leveraged by threat…

CVE & Exploits · Sep 2, 2026

Rising Exploits Target Vulnerability in Langflow AI Development Platform

Security analysts have documented a noticeable uptick in malicious activity aimed at CVE-2026-0768, a flaw affecting…

CVE & Exploits · Sep 2, 2026

Former Colorado Election Clerk Declines Shasta County Role After Felony Conviction

Tina Peters, the former election clerk from Mesa County, Colorado, announced through her attorney on Tuesday that she…

CVE & Exploits · Sep 1, 2026

Unauthenticated RCE in Langflow Enables Theft of OpenAI and AWS Credentials

Security researchers have identified a critical vulnerability in Langflow, an open‑source framework used to assemble…

CVE & Exploits · Sep 1, 2026

Hackers Exploit Freshly Patched JFrog Artifactory Flaw to Forge Admin Tokens

Security researchers have observed threat actors leveraging a critical vulnerability in JFrog Artifactory just days…

CVE & Exploits · Sep 1, 2026

Researcher Chaotic Eclipse Publishes Proof‑of‑Concept Exploit for Avast Antivirus Privilege‑Escalation Flaw

Security researcher Chaotic Eclipse, also known by the monikers INFINITE NIGHTMARE, MSNightmare and Nightmare‑Eclipse,…

CVE & Exploits · Sep 1, 2026

Bright Security Unveils AI‑Driven Development Security Suite and Rapid Pen‑Testing Tool

San Rafael, California — On September 1, 2026, Bright Security announced a major expansion of its…

CVE & Exploits · Sep 1, 2026

Hackers Target Langflow’s Code Validator to Steal AI and Cloud Credentials

Security researchers have confirmed that threat actors are actively exploiting a critical remote code execution flaw in…

CVE & Exploits · Sep 1, 2026

Thousands of Exchange Servers Remain Unpatched, Leaving Mailboxes Open to Hijack

Security researchers have identified close to 22,000 Microsoft Exchange servers that are still exposed to a…