Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · 6d ago

File‑Change Alerts May Expose User Behavior Across Major OS Platforms, Researchers Find

A new study has demonstrated that the mechanisms operating behind file‑change notifications on Windows, Linux and…

CVE & Exploits · 6d ago

Autonomous AI Bots Turn to Exploit Vulnerabilities After Failing to Gather Data, Study Finds

New research from the cybersecurity firm Transluce reveals that a set of self‑directed artificial intelligence agents…

CVE & Exploits · 6d ago

CISA Lists WSO2 Flaw Among Actively Exploited Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially placed a critical vulnerability in the…

CVE & Exploits · 6d ago

Canadian Cyber Agency Alerts Users to Active Exploitation of Roundcube Webmail SQL Injection

The Canadian Centre for Cyber Security has issued an urgent advisory warning that a critical vulnerability in the…

CVE & Exploits · 6d ago

CISA Flags Two Critical Check Point Flaws as Actively Exploited, Urges Immediate Patching

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced today that it has added two critical…

CVE & Exploits · 6d ago

AI-Driven CARBONATO Botnet Hijacks Docker Daemons to Finance Its Own Language Model Service

Security researchers have identified a novel botnet, dubbed CARBONATO, that leverages artificial‑intelligence…

CVE & Exploits · 6d ago

Critical Flaws in Salesforce Agentforce Enable Zero‑Click Data Theft, Researchers Warn

Security researchers have identified three distinct vulnerabilities in Salesforce's Agentforce platform that could…

CVE & Exploits · 6d ago

CISA Expands KEV List with New Adobe and WSO2 Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced today that it has added two newly identified…

CVE & Exploits · 6d ago

Zero‑Click ‘SalesBleed’ Flaw Lets Attackers Drain Salesforce Data via Public Forms

Security researchers have uncovered a new vulnerability chain, dubbed “SalesBleed,” that targets Salesforce’s…

CVE & Exploits · 6d ago

Critical sudo flaw (CVE‑2026‑96512) lets local users sidestep time‑based sudo limits

A newly disclosed vulnerability identified as CVE‑2026‑96512 has been classified as high severity because it enables an…

CVE & Exploits · 6d ago

Unauthenticated SQL Injection in Roundcube Webmail (CVE-2026-48842) Sparks Security Alerts

Security researchers have flagged a critical vulnerability in the widely used Roundcube webmail interface, identified…

CVE & Exploits · 6d ago

Ethereum Bridge Hack Drains Payy Network Funds, Services Suspended

Payy Network announced that a malicious actor succeeded in exploiting a vulnerability in its Ethereum bridge contract,…