Node.js Patches 12 Flaws Including TLS Bypass and DoS Bug
The Node.js project has issued critical security updates...
Critical Splunk Auth Bypass Flaw CVE-2026-20253 Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency...
HazyBeacon Malware Hijacks AWS Lambda for Covert C2 Attacks
A sophisticated cloud-native malware campaign, tracked...
CVE-2026-50656: RoguePlanet Zero-Day Bypasses Microsoft Defender
Microsoft has officially confirmed a newly disclosed...
CVE-2026-4020: Gravity SMTP Flaw Exposes 100K WordPress Sites
Threat actors are actively exploiting a critical security...
Critical Joomla Plugin Flaw Allows Unauthenticated PHP Code Execution
A critical improper access control vulnerability has been...
CISA Adds Oracle PeopleSoft CVE-2026-35273 to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency...
CVE-2026-42824: Microsoft 365 Copilot Search Leak Flaw Patched
A critical vulnerability chain in Microsoft 365 Copilot...
Palo Alto GlobalProtect VPN Flaw Actively Exploited in the Wild
Palo Alto Networks Unit 42 has confirmed active...
Critical CodeIgniter4 Bug Lets Attackers Upload PHP Webshells
A maximum-severity vulnerability has been discovered in the...