Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · 5d ago

Red Heron Leverages Gitea Zero‑Day to Exfiltrate Code and Install Linux Rootkit

Security researchers have confirmed that a threat group identified as Red Heron exploited a critical…

CVE & Exploits · 5d ago

Kiteworks Issues Global Shutdown Advisory Over Possible Zero-Day Exploit

Kiteworks, the provider of secure content collaboration software, has issued an urgent advisory urging its worldwide…

CVE & Exploits · 5d ago

CISA Flags Critical WordPress Core Vulnerability in Federal Exploit Database

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially listed a high‑severity flaw in…

CVE & Exploits · 5d ago

Kiteworks Calls for Global Six-Hour Server Shutdown Amid Zero-Day Threat

Kiteworks, a provider of secure file‑sharing solutions, has issued an urgent advisory asking its worldwide customer…

CVE & Exploits · 5d ago

CISA Flags New SharePoint and RouterOS Flaws as Actively Exploited Threats

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced Wednesday that it has added two critical…

CVE & Exploits · 5d ago

Elementor Plugin Flaw Could Let Hackers Grant Themselves WordPress Admin Rights

A critical cross‑site request forgery (CSRF) flaw has been identified in Elementor, a widely used page‑builder plugin…

CVE & Exploits · 5d ago

CISA Alerts Organizations to Active Exploits of WSO2, SharePoint and Adobe Commerce Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory warning that threat actors…

CVE & Exploits · 6d ago

Salesforce’s Agentforce AI Agents Found Vulnerable to Zero‑Click Exploits, Raising AI Security Concerns

Security researchers have identified a series of zero‑click flaws, dubbed “SalesBleed,” affecting Salesforce’s…

CVE & Exploits · 6d ago

Fourteen-Year-Old Linux Kernel Bug Lets Unprivileged Users Gain Root and Break Out of Docker

A flaw embedded in the Linux kernel’s AF_ALG cryptographic interface for more than a decade can be weaponized by a…

CVE & Exploits · 6d ago

Remediation Gaps Persist as Exploited Vulnerabilities Dominate Attack Surface, Verizon Finds

Only about a quarter of the vulnerabilities that the Cybersecurity and Infrastructure Security Agency (CISA) has…

CVE & Exploits · 6d ago

AI‑Powered Automation Turns Failed Cloud Attacks Into Low‑Cost Replays, Relieving SOC Fatigue

Security operations centers are no longer forced to treat every alert as a fresh breach, as artificial intelligence…

CVE & Exploits · 6d ago

Critical ServiceNow AI Platform Flaws Expose Data and Enable Remote Code Execution

ServiceNow, the cloud‑based workflow and IT service management provider, has disclosed a set of five security…