Critical Palo Alto VPN Bug Exploited by Qilin Ransomware
The Qilin ransomware gang is actively exploiting a critical vulnerability in Palo Alto Networks GlobalProtect…
CISA KEV: Critical Joomla JCE RCE Actively Exploited
Attackers are actively exploiting CVE-2026-48907, a critical improper access control vulnerability in Joomla Content Editor…
CISA KEV Adds Splunk, Joomla Vulns: Patch By July 3 Deadline
A CVE-2026-48907 vulnerability in the Joomla JCE editor, rated 10.0 CVSS, allows unauthenticated attackers to…
CISA KEV: Magento RCE Flaw CVE-2026-45247 Actively Exploited
A critical remote code execution (RCE) flaw, CVE-2026-45247, affecting the Mirasvit Cache Warmer extension for…
Microsoft Defender Zero-Days Actively Exploited: Patch Now
Microsoft confirmed active exploitation of two zero-day vulnerabilities, CVE-2026-41091 and CVE-2026-45498, in Microsoft Defender. CISA…
CISA Adds Ivanti EPMM Zero-Day CVE-2026-6973 to KEV Catalog
A high-severity Ivanti Endpoint Manager Mobile (EPMM) vulnerability, CVE-2026-6973, was added to the CISA Known…
CISA KEV: LiteSpeed cPanel Plugin CVE-2026-48172 Actively Exploited
LiteSpeed cPanel Plugin CVE-2026-48172 Actively Exploited On May 26, 2026, CISA added CVE-2026-48172 to its…
Microsoft Zero-Days: Defender & Exchange Exploited In-The-Wild
A critical cross-site scripting (XSS) vulnerability in Microsoft Exchange's Outlook Web Access (OWA), identified as…
Ivanti EPMM Zero-Day Exploited in Targeted Attacks, Patches
On May 8, 2026, Ivanti released security updates for its Endpoint Manager Mobile (EPMM) product…
Dirty Frag: New Linux Kernel Vulnerability Grants Root Access
Linux Kernel [CVE-2026-43284, CVE-2026-43500] New 'Dirty Frag' Vulnerability Grants Root Access A new critical vulnerability…