Tag: Vulnerabilities
- Vulnerabilities
- Threats
- Incidents
- Products
- Trends
- Surveys
- Research
- Case Studies
- Partnerships
- Breaking
-
Researcher says Claude Dispatch flaw lets browser extensions run code
Anthropic reportedly closed the report; no fix has been announced.
-
Microsoft Paint flaw fix may not reach PCs through Windows Update
The Store-delivered fix is easy to miss, reports say.
-
Synology warns of ransomware targeting outdated DSM devices
Attackers exploit a flaw fixed in December 2024.
-
SAP flaws now exploited within one to three days of patches
Onapsis and Recorded Future measure a sharply shrinking exploit window.
-
Chinese-language framework targets Flowise AI servers with ‘hello’ probes
Era Security counted 703 exposed Flowise instances lacking authentication.
-
Next.js patches six cache and response flaws in new releases
Patches fix one high-severity and five medium-severity issues.
-
Talos: KeyDrift malware planted on Cisco SD-WAN controllers to harvest IPsec keys
Attackers used a Cisco SD-WAN flaw to deploy KeyDrift malware.
-
OpenSSH 10.6p2 fixes password bypass on musl-based systems such as Alpine
OpenSSH fixes password bypass on Alpine and other musl systems.
-
OpenAI says AI agents turned 948 Linux kernel bugs into root exploits
OpenAI says AI agents found 948 exploitable Linux kernel bugs.
-
Debian and Ubuntu patch APT flaw that lets a network attacker run code as root
A flaw in APT lets network attackers swap verified packages.
-
SonicWall patches exploited SSL-VPN flaw that can bypass SAML MFA
SonicWall patches exploited SSL-VPN flaw affecting SAML logins.
-
PHP2Shell two weeks on: a second patch round and chained attacks
Kaspersky says PHP2Shell patching isn’t finished after the first round.