VMware vCenter CVE-2026-59310 Exploited in Global Attacks
Attackers are exploiting VMware vCenter flaw CVE-2026-59310 to deploy reverse SSH access, with more than 360 victim IPs observed across 47 countries worldwide.
Read more →Vulnerabilities
Latest articles in Vulnerabilities
SharePoint CVE-2026-55040 Exploited After Public PoC
Attackers are testing SharePoint CVE-2026-55040 after a public PoC exposed a critical authentication bypass. Microsoft patches are available right now.
Read more →
Zoom Annotation Flaws Enable Zero-Click Remote Code Execution
Zoom patched three annotation flaws that could enable remote code execution or denial of service across Workplace, Rooms, VDI and Meeting SDK clients.
Read more →
Metabase Zero-Day SQL Injection Exploited in Active Attacks
Metabase confirms active exploitation of a critical zero-day SQL injection flaw that gives remote attackers administrator access. Self-hosted users must patch.
Read more →
Critical TeamCity RCE Flaw Threatens CI/CD Servers
Rapid7 details critical TeamCity flaw CVE-2026-63077, which lets unauthenticated attackers run commands on exposed on-premises CI/CD servers worldwide.
Read more →
Zero-Click Prompt Injection Hijacks Agentic AI Browsers
Zero-click prompt injection tests hijacked agentic AI browsers, exposing authenticated sessions to phishing, data theft and unauthorized account actions.
Read more →
CISA Flags Three Actively Exploited Enterprise Flaws
CISA adds exploited Langflow, N-central and Tomcat flaws to its KEV catalog, giving federal agencies until August 7 to apply vendor mitigations.
Read more →
Coldcard Wallet Flaw Linked to $88.6 Million Bitcoin Theft
Coldcard's weak seed generation flaw is linked to suspected thefts of $88.6 million in bitcoin, with affected wallet owners urged to migrate funds now.
Read more →
wp2shell POST Variant Bypasses URL-Only WordPress Defenses
Cloudways reports a wp2shell variant hiding the WordPress batch route in POST bodies, bypassing URL-only defenses and reinforcing the need to patch now.
Read more →
Fastjson RCE Flaw CVE-2026-16723 Exploited in Attacks
Attackers are exploiting critical Fastjson flaw CVE-2026-16723 for unauthenticated remote code execution, leaving unsupported 1.x deployments at risk.
Read more →