Microsoft SharePoint CVE-2026-65660 Now Under Active Attack: Flaw First Listed as 'Spoofing' Upgraded to Code Injection RCE on CISA's KEV List
Microsoft SharePoint CVE-2026-65660 Now Under Active Attack: Flaw First Listed
Thomas Anderson
Kiteworks Tells Customers to Shut Down Their Servers Over Law Enforcement Warning of an 'Imminent' Zero-Day Attack
Kiteworks Tells Customers to Shut Down Their Servers Over Law Enforcement Warning
Bitget Loses $351.6 Million to Suspected North Korean Hackers After Backend Compromise; Exchange Suspends Withdrawals
Bitget Loses $351.6 Million to Suspected North Korean Hackers After Backend
Cloudflare Containers Flaw Exposed Leftover Customer Disk Data to Other Tenants; Platform Fixed It and Found No Evidence of Abuse
Cloudflare Containers Flaw Exposed Leftover Customer Disk Data to Other Tenants; Platform
ServiceNow Patches Five AI Platform Flaws, Including Critical CVE-2026-13016 SQL Injection and CVE-2026-86860 Data Extraction Vulnerability
ServiceNow Patches Five AI Platform Flaws, Including Critical CVE-2026-13016 SQL
Roundcube CVE-2026-48842 Under Active Exploitation: Pre-Auth SQL Injection Threatens 523,000 Exposed Webmail Instances
Roundcube CVE-2026-48842 Under Active Exploitation: Pre-Auth SQL Injection Threatens
CISA Unveils 'Quality Era' Framework for the CVE Program as AI-Fueled Discovery Pushes 2026 Toward 100,000 Records
CISA Unveils 'Quality Era' Framework for the CVE Program as
MikroTrick Revealed: Two MikroTik SSH Flaws Chain Into Passwordless Router Takeovers, Exploited Before the Patch
MikroTrick Revealed: Two MikroTik SSH Flaws Chain Into Passwordless Router Takeovers, Exploited
Chrome 154 Rolls Out With Fixes for 108 Vulnerabilities, Including 11 Critical GPU, WebGL and ANGLE Flaws
Chrome 154 Rolls Out With Fixes for 108 Vulnerabilities, Including 11 Critical
cPanel CVE-2026-87899: Any Hosting Account Can Run Code as Root on Shared Servers via CalDAV Flaw
cPanel CVE-2026-87899: Any Hosting Account Can Run Code as Root
ShinyHunters Claims FBI Breach via PeopleSoft Zero-Day, Defaces FBIjobs.gov — FBI Says It Is Investigating
ShinyHunters Claims FBI Breach via PeopleSoft Zero-Day, Defaces FBIjobs.gov — FBI
Arista VeloCloud Orchestrator Zero-Day CVE-2026-93952 Hits CVSS 10.0, Lands on CISA KEV With Active Exploitation
Arista VeloCloud Orchestrator Zero-Day CVE-2026-93952 Hits CVSS 10.0,