Browsing: vulnerability management

Top Highlights Attackers can exploit remote unauthenticated vulnerabilities in NGINX (CVE-2026-42530 and CVE-2026-42055) to execute…

Fast Facts Attackers exploited legitimate Microsoft Teams infrastructure by utilizing a custom Go-based backdoor, Backdoor.Turn,…

Top Highlights Attackers can hijack Google Cloud Vertex AI models by creating predictable storage buckets…

Essential Insights A privilege escalation vulnerability (CVE-2026-54420) in LiteSpeed cPanel Plugin allows users with FTP…

Fast Facts Attackers can exploit a URL injection flaw in Microsoft Copilot to extract sensitive…

Essential Insights CVSS scores alone often misrepresent real-world risk, as they lack context on asset…

Top Highlights ShinyHunters exploited CVE-2026-35273 in Oracle PeopleSoft to breach over 450,000 student records at…

Quick Takeaways Hackers are actively exploiting CVE-2026-0257, a critical authentication bypass in PAN-OS, to gain…

Essential Insights Threat actors leverage initial access brokers (IABs) and traffic distribution systems (TDS), such…

Summary Points The JDY botnet, now over 1,500 compromised IoT and SOHO devices, primarily in…