Vulnerabilities

New Windows Zero-Day Vulnerabilities Include BitLocker Bypass and Privilege Escalation

Two new Windows zero-day vulnerabilities have been disclosed involving a BitLocker bypass and a privilege escalation in the...

Thirumala Rao Padilam May 14, 2026

Threat Intelligence

Threat Actors Target PraisonAI CVE-2026-44338 Authentication Bypass Within Hours of Disclosure

Shortly after its public disclosure, attackers began exploiting CVE-2026-44338, an authentication bypass vulnerability in PraisonAI that exposes sensitive...

Thirumala Rao Padilam May 14, 2026

Vulnerabilities

Microsoft Patch Tuesday Delivers 137 Fixes Without Zero-Day Vulnerabilities

Microsoft's latest Patch Tuesday includes 137 security updates, marking the first time in two years without a zero-day...

Thirumala Rao Padilam May 13, 2026

Vulnerabilities

Google Introduces Intrusion Logging Feature for Enhanced Android Spyware Forensics

Google has introduced Intrusion Logging as a new opt-in feature on Android devices to support forensic analysis of...

Thirumala Rao Padilam May 13, 2026

Vulnerabilities

Critical Out-of-Bounds Read Vulnerability in Ollama Exposes Process Memory

A critical vulnerability in Ollama allows remote attackers to leak process memory through an out-of-bounds read flaw, potentially...

Thirumala Rao Padilam May 10, 2026

Cybersecurity News

RansomHouse Claims Responsibility for Trellix Source Code Repository Breach

The RansomHouse group has claimed responsibility for the breach of Trellix's source code repository, releasing images as proof...

Thirumala Rao Padilam May 8, 2026

Vulnerabilities

New Dirty Frag Linux Kernel Vulnerability Enables Local Privilege Escalation Across Major Distributions

A new unpatched local privilege escalation vulnerability named Dirty Frag has been reported in the Linux kernel, succeeding...

Thirumala Rao Padilam May 8, 2026

Vulnerabilities

Critical Vulnerabilities in vm2 Node.js Library Allow Sandbox Escape and Arbitrary Code Execution

Multiple critical flaws in the vm2 Node.js library can enable attackers to escape sandbox restrictions and execute arbitrary...

Thirumala Rao Padilam May 7, 2026

Vulnerabilities

CISA Adds Linux Local Privilege Escalation Bug CVE-2026-31431 to Known Exploited Vulnerabilities List

CISA has included a local privilege escalation vulnerability affecting multiple Linux distributions in its Known Exploited Vulnerabilities catalog...

Thirumala Rao Padilam May 3, 2026

Vulnerabilities

Critical Authentication Bypass Vulnerability CVE-2026-41940 Exploited in cPanel, WHM, and WP Squared

A critical authentication bypass vulnerability, CVE-2026-41940, affecting cPanel, WHM, and WP Squared is being actively exploited in the...

Thirumala Rao Padilam April 30, 2026