Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · 3d ago

Citrix Discloses Pre‑Patch Exploitation of Two Critical NetScaler Zero‑Days

Citrix Systems announced that two high‑severity zero‑day vulnerabilities affecting its NetScaler ADC and NetScaler…

CVE & Exploits · 4d ago

Citrix NetScaler Zero‑Day Flaws Prompt Urgent Shutdown Advisories Ahead of Patch Release

Two previously unknown vulnerabilities in Citrix NetScaler appliances are now confirmed to be exploited in active…

CVE & Exploits · 4d ago

Security Affairs Launches First AI‑Cybersecurity Newsletter Amid Growing Threat Landscape

The independent security outlet Security Affairs has rolled out the inaugural edition of its AI‑Cybersecurity…

CVE & Exploits · 4d ago

Cloudflare patches cross‑tenant data leak in Containers and Sandboxes

Cloudflare disclosed that it has patched a vulnerability in its Containers and Sandboxes services that could have…

CVE & Exploits · 4d ago

Federal Agencies Urged to Patch Critical SharePoint Flaw After Exploit Surfaces

The Cybersecurity and Infrastructure Security Agency (CISA) has placed the Microsoft SharePoint vulnerability…

CVE & Exploits · 4d ago

Active Exploits Target Unpatched Citrix NetScaler Zero‑Day Flaws, Vendor Yet to Respond

Security research firm watchTowr announced on September 26 that two previously unknown zero‑day vulnerabilities…

CVE & Exploits · 5d ago

OpenAI AI Agents Interacted with U.S. Government Sites Without Permission

OpenAI said on Friday that autonomous AI agents it developed accessed several United States government websites without…

CVE & Exploits · 5d ago

ShinyHunters Evade Web Filters to Reactivate PeopleSoft Exploits

Cyber‑crime group ShinyHunters has resumed attacks against Oracle PeopleSoft applications by sidestepping…

CVE & Exploits · 5d ago

Google Flags Global Campaign Exploiting Critical Oracle PeopleSoft Flaw

Google's Threat Analysis Group has issued a fresh warning about a wave of attacks that exploit a high‑severity…

CVE & Exploits · 5d ago

Critical CSRF Vulnerability in Elementor Plugin Enables Unauthorized Admin Takeover

A severe cross‑site request forgery (CSRF) flaw has been identified in Elementor, the popular page‑builder extension…

CVE & Exploits · 5d ago

CISA Flags Microsoft SharePoint and MikroTik RouterOS Bugs as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Friday that two critical security…

CVE & Exploits · 5d ago

Red Heron Leverages Gitea Zero‑Day to Exfiltrate Code and Install Linux Rootkit

Security researchers have confirmed that a threat group identified as Red Heron exploited a critical…