Microsoft says CVE-2026-69836, a CVSS 10.0 Entra ID RCE flaw, has been exploited in the wild but is fully mitigated with no ...

Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability.

Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code ...

Microsoft disclosed a critical remote code execution vulnerability affecting its Entra ID cloud identity service.

CISA issued a 3-day deadline for agencies to patch a Zimbra security vulnerability, CVE-2026-73570, which allows full ...

A newly discovered critical vulnerability in Konami’s Metal Gear Online 3 allows attackers to compromise players who simply ...

Attackers exploit CVE-2026-73570 on Zimbra servers with zimbra-snmp installed and SNMP notifications enabled, allowing ...

A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, ...

WordPress has patched CVE-2026-65640, a high-severity vulnerability that allows authenticated attackers to execute arbitrary code.

A critical zero-day vulnerability in Microsoft SharePoint is being exploited in the wild right now, and more than 1,300 servers remain exposed to the public internet with no patch applied. The flaw, ...

A flaw in Hugging Face Transformers could allow malicious AI models to execute code, exposing credentials and highlighting AI supply chain risks. Organizations using vulnerable versions of the Hugging ...