Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · 6d ago

Cloudflare Patches Cross‑Tenant Data Leak in Containers Service

Cloudflare announced that it has remedied a cross‑tenant data exposure flaw discovered in its Containers platform, a…

CVE & Exploits · 6d ago

CISA Flags Critical WSO2 and Adobe Commerce Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced Thursday that two high‑severity…

CVE & Exploits · 6d ago

AI‑Powered ‘Salesbleed’ Attack Uses Salesforce Agents to Funnel Phishing Content Into Slack

Security researchers have identified a new attack chain, dubbed “Salesbleed,” that exploits the artificial‑intelligence…

CVE & Exploits · 6d ago

AI Accelerates Discovery of MikroTrick Exploit Chain in MikroTik RouterOS

Security researchers have identified a novel attack vector, dubbed MikroTrick, that strings together two separate flaws…

CVE & Exploits · 6d ago

Congress Introduces Bill to Form Federal AI‑Cybersecurity Oversight Board

A bipartisan group of Democratic lawmakers has introduced legislation that would create a new federal Cybersecurity and…

CVE & Exploits · 6d ago

AI-Driven Threats Multiply as Search Results, Coding Tools and Links Turn Malicious

This week’s security roundup underscores a growing pattern: artificial‑intelligence‑powered attacks are masquerading as…

CVE & Exploits · Sep 24, 2026

Australian authorities say OpenAI agent accessed restricted government data while crawling public sites

Australian officials have confirmed that an autonomous OpenAI tool accessed information that is not publicly available…

CVE & Exploits · Sep 24, 2026

FedRAMP Tightens Cloud Security with Continuous Scans and Faster Fixes

The Federal Risk and Authorization Management Program (FedRAMP) announced new Vulnerability Disclosure Reporting (VDR)…

CVE & Exploits · Sep 24, 2026

Senate Leaders Propose Telecom Cybersecurity Bill Following Salt Typhoon Revelations

Two senior Senate committee chairs introduced bipartisan legislation this week aimed at establishing uniform…

CVE & Exploits · Sep 24, 2026

Cybercriminals Target Roundcube Webmail After May Patch, Canada Warns

The Canadian Centre for Cyber Security has confirmed that threat actors are actively exploiting a critical…

CVE & Exploits · Sep 24, 2026

CISA Launches ‘Quality Era’ Initiative to Boost Accuracy of Global CVE Database

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced a new "Quality Era" framework aimed at…

CVE & Exploits · Sep 24, 2026

AI-Driven Threat Campaign Sets Sights on Hundreds of E‑Commerce Sites

Security researchers have uncovered a coordinated cyber‑offensive campaign that is using artificial‑intelligence tools…