Vulnerabilities - The Secure Truth

Breaking

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 Hackers Hide Credit Card Stealer in Pixel-Sized SVG Images Targeting Magento Stores Microsoft Suspends Developer Accounts for High-Profile Open Source Projects European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Ransomware Attacks Surge in 2026: Healthcare and Finance Most Targeted Google Chrome Zero-Day Vulnerability Actively Exploited – Update Immediately Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 Hackers Hide Credit Card Stealer in Pixel-Sized SVG Images Targeting Magento Stores Microsoft Suspends Developer Accounts for High-Profile Open Source Projects European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack Ransomware Attacks Surge in 2026: Healthcare and Finance Most Targeted Google Chrome Zero-Day Vulnerability Actively Exploited – Update Immediately

6569 CVEs This Month

10 Actively Exploited

0 Ransomware Activity

34 Breaches YTD

Threat Investigation Portal

Investigate an IOC in the live graph workspace.

Investigate IOC

Vulnerabilities

Home ->

Vulnerabilities

Researchers Uncover Malware Attacks Exploiting Google Password Manager Synced Passkeys

Newly identified attacks show malware on compromised Windows devices can hijack Google synced passkeys to access user accounts...

Thirumala Rao Padilam August 4, 2026

Vulnerabilities

OpenSSL HollowByte Flaw Can Exhaust Server Memory With Minimal TLS Request

An unpatched OpenSSL vulnerability called HollowByte allows attackers to cause significant memory allocation on servers using just 11...

Thirumala Rao Padilam July 18, 2026

Vulnerabilities

New wp2shell WordPress Core Flaw Allows Unauthenticated Code Execution

A critical vulnerability in the WordPress core enables unauthenticated attackers to execute arbitrary code via an anonymous HTTP...

Thirumala Rao Padilam July 18, 2026

Vulnerabilities

Zoom Alerts Users to Critical Account Takeover Vulnerability in Windows Client

Zoom has disclosed a critical vulnerability affecting its Windows desktop client and SDK that may allow unauthenticated attackers...

Thirumala Rao Padilam July 16, 2026

Threat Intelligence

Security Tools Accelerate Bug Discovery Amid Ongoing Challenges with Patch Delays and Exploitation

While security tools are identifying software bugs at an unprecedented pace, attackers are leveraging the same technology for...

Thirumala Rao Padilam July 13, 2026

Vulnerabilities

Opera GX Vulnerability Allowed Malicious Sites to Auto-Install Data-Stealing Browser Add-ons

A security flaw in Opera GX enabled malicious websites to silently install browser add-ons and extract data like...

Thirumala Rao Padilam July 6, 2026

Vulnerabilities

Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters

A critical vulnerability in Argo CD's repo-server component allows unauthenticated code execution if attackers can access the internal...

Thirumala Rao Padilam July 2, 2026

Vulnerabilities

SharePoint RCE Vulnerability CVE-2026-45659 Added to CISA Known Exploited Vulnerabilities Catalog

CISA has added a critical remote code execution vulnerability in Microsoft SharePoint Server to its Known Exploited Vulnerabilities...

Thirumala Rao Padilam July 2, 2026

AI Security

OpenAI Enhances GPT-5.5-Cyber Model to Assist Defenders in Patching Vulnerabilities

OpenAI has released an improved version of its GPT-5.5-Cyber model to trusted defenders as part of its Daybreak...

Thirumala Rao Padilam June 23, 2026

Threat Intelligence

Hackers Exploit Gravity SMTP WordPress Plugin Vulnerability to Access API Keys

A medium-severity flaw in the Gravity SMTP WordPress plugin is being exploited to extract sensitive configuration data including...

Thirumala Rao Padilam June 20, 2026

1 2 3 … 7 Next »

error: Content is protected !!