Vulnerabilities

Cisco Patches Critical CVSS 10.0 Vulnerability in Secure Workload’s REST API

Cisco releases a security update addressing a critical vulnerability (CVE-2026-20223) in Secure Workload that allows unauthenticated attackers to...

Thirumala Rao Padilam May 22, 2026

Vulnerabilities

CISA Adds Actively Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV Catalog

CISA has included two critical vulnerabilities affecting Langflow and Trend Micro Apex One in its Known Exploited Vulnerabilities...

Thirumala Rao Padilam May 22, 2026

Vulnerabilities

CISA Updates Known Exploited Vulnerabilities Catalog with New Nomination Form

CISA has enhanced its Known Exploited Vulnerabilities Catalog by adding a new nomination form to facilitate reporting and...

Thirumala Rao Padilam May 21, 2026

Vulnerabilities

Critical Vulnerability in ChromaDB Python FastAPI Enables Remote Code Execution

A maximum severity flaw in the latest Python FastAPI implementation of ChromaDB exposes servers to unauthenticated remote code...

Thirumala Rao Padilam May 20, 2026

Vulnerabilities

New Windows ‘MiniPlasma’ Zero-Day Exploit Enables SYSTEM Privilege Escalation

A newly disclosed Windows zero-day privilege escalation vulnerability, called MiniPlasma, allows attackers to gain SYSTEM-level access on fully...

Thirumala Rao Padilam May 18, 2026

Vulnerabilities

Researchers Earn Over $1.2 Million for Exploiting 47 Zero-Days at Pwn2Own Berlin 2026

The Pwn2Own Berlin 2026 contest ended with hackers exploiting 47 zero-day vulnerabilities, earning a total of $1,298,250 in...

Thirumala Rao Padilam May 18, 2026

Vulnerabilities

Proof-of-Concept Exploit Released for DirtyDecrypt Linux Kernel Local Privilege Escalation Flaw

A local privilege escalation vulnerability in the Linux kernel's rxgk module has been patched, but a proof-of-concept exploit...

Thirumala Rao Padilam May 18, 2026

Vulnerabilities

Active Exploitation of Microsoft Exchange Server Vulnerability CVE-2026-42897 Reported

Microsoft has alerted users of an actively exploited spoofing vulnerability in on-premises Exchange Server, urging attention to CVE-2026-42897.

Thirumala Rao Padilam May 15, 2026

Vulnerabilities

New Windows Zero-Day Vulnerabilities Include BitLocker Bypass and Privilege Escalation

Two new Windows zero-day vulnerabilities have been disclosed involving a BitLocker bypass and a privilege escalation in the...

Thirumala Rao Padilam May 14, 2026

Threat Intelligence

Threat Actors Target PraisonAI CVE-2026-44338 Authentication Bypass Within Hours of Disclosure

Shortly after its public disclosure, attackers began exploiting CVE-2026-44338, an authentication bypass vulnerability in PraisonAI that exposes sensitive...

Thirumala Rao Padilam May 14, 2026