Vulnerabilities

F5 Releases Patches for Two Critical Remote Code Execution Flaws in NGINX Open Source

F5 has addressed two critical vulnerabilities in NGINX Open Source that could allow remote attackers to execute code....

Thirumala Rao Padilam June 18, 2026

Vulnerabilities

Microsoft Resolves Windows Server 2016 June 2026 Update Failures

Microsoft addresses update failures for the June 2026 security patches on out-of-date Windows Server 2016 systems, restoring the...

Thirumala Rao Padilam June 18, 2026

Vulnerabilities

Google Vertex AI SDK Flaw Allowed Model Upload Hijacking via Bucket Squatting

A vulnerability in Google Cloud’s Vertex AI SDK for Python enabled attackers to hijack machine learning model uploads...

Thirumala Rao Padilam June 17, 2026

Threat Intelligence

Attackers Exploit Multiple Vulnerabilities in Fortinet FortiSandbox Including Recently Patched Flaw

Threat intelligence firm Defused Cyber reports active exploitation of three vulnerabilities in Fortinet FortiSandbox, including a critical path...

Thirumala Rao Padilam June 16, 2026

Vulnerabilities

Microsoft Releases Patch Update for 206 Vulnerabilities Including Three Public Zero-Days

Microsoft issued security updates for a record 206 vulnerabilities across its software, addressing three zero-day flaws disclosed publicly...

Thirumala Rao Padilam June 10, 2026

Cloud & Identity Security

Over 30 Red Hat npm Packages Compromised to Distribute New Credential-Stealing Malware Variant

A supply-chain attack compromised more than 30 npm packages under Red Hat's namespace, distributing a new variant of...

Thirumala Rao Padilam June 2, 2026

Vulnerabilities

Dashlane Reports Brute-Force Attack Affecting Encrypted Vaults of Under 20 Users

Password manager Dashlane has disclosed a brute-force attack targeting two-factor authentication, resulting in encrypted vault downloads for fewer...

Thirumala Rao Padilam June 2, 2026

Vulnerabilities

Active Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)

Palo Alto Networks has disclosed an authentication bypass vulnerability in PAN-OS and Prisma Access that is actively exploited...

Thirumala Rao Padilam May 30, 2026

Threat Intelligence

JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

A new threat actor named JINX-0164 employs recruitment-themed social engineering and custom macOS malware to target cryptocurrency firms,...

Thirumala Rao Padilam May 28, 2026

Vulnerabilities

Ghost CMS SQL Injection Vulnerability Exploited in Widespread ClickFix Campaign

A critical SQL injection flaw in Ghost CMS is actively exploited in a large-scale campaign to inject malicious...

Thirumala Rao Padilam May 24, 2026