Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

Ransomware is the Scoreboard

Ransomware is the scoreboard for defensive architecture. Learn why traditional security methods fail and how to use AI and threat…

VULNMicrosoft Security2 days ago

Email threat landscape: Q2 2026 trends and insights

In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contributed to…

VULNPalo Alto Unit 422 days ago

Russian Global Webmail Espionage

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credential…

VULNhighZero Day Initiative3 days ago

ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. User interaction i…

VULNhighZero Day Initiative3 days ago

ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability

This vulnerability allows local attackers to escape the model runner sandbox on affected installations of Docker Desktop for macOS…

VULNhighCVE-2026-129217.8 HIGHZero Day Initiative3 days ago

ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User intera…

VULNhighCVE-2026-123907.8 HIGHZero Day Initiative3 days ago

ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User intera…

VULNhighCVE-2026-6851Zero Day Initiative3 days ago

ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attac…

VULNhighCVE-2026-12357Zero Day Initiative3 days ago

ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Au…

VULNcriticalFull Disclosure3 days ago

A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits

Posted by zz lin on Jul 22 I came across a project, "0day Rubbish", that states it will continuously https://0day-rubbish.com/blog…

VULNFull Disclosure3 days ago

Synology stale DNS allows practical interception of traffic from vulnerable DSM clients

Posted by shed riot on Jul 22 # Synology stale DNS allows practical interception of traffic from vulnerable DSM clients Vendor ca…

VULNFull Disclosure3 days ago

Amplitude customers using domain proxies should update their configuration immediately.

Posted by shed riot on Jul 22 After receiving live analytics requests intended for `api2.amplitude.com`, I contacted `security ()…

VULNRecorded Future3 days ago

TAG-195 Upgrades MaaS Ecosystem with Modular Tools

Insikt Group identifies four new TAG-195 malware families, revealing an architectural transition toward modular, operator-driven t…

VULNhighSentinelOne Labs3 days ago

Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis?

A real-world benchmark tests whether powerful AI models can keep an investigation trustworthy when new evidence invalidates their…

VULNMicrosoft Security3 days ago

Real world incident response: Microsoft and AXA XL strengthen cyber resilience

Our collaboration with AXA XL brings Microsoft Incident Response services directly to cyber insurance policyholders, helping organ…

VULNRecorded Future4 days ago

Modern Attack Vectors | Recorded Future

What is an attack vector, and how does it impact your business? Discover the top threat actor targets in 2026 and learn attack vec…

VULNSentinelOne Labs4 days ago

Iran War Cyber Threat Landscape | A Midyear Assessment on What Matters

In April, SentinelLABS’ Tom Hegel published an initial assessment of the first five weeks of the conflict. Three months later, the…

VULNhighCVE-2026-13585Full Disclosure5 days ago

ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver

Posted by Hayaturehman Ahmadzai on Jul 20 Hi all, I'm disclosing a vulnerability (CVE-2026-13585) in the ASUS bsitf.sys / AsusBSI…

VULNFull Disclosure5 days ago

New Release: UFONet v2.0 - "R3DST4R!"...

Posted by psy on Jul 20 Hi Community, https://ufonet.03c8.net --------- "UFONet is a free software, P2P and cryptographic -disru…

VULNFull Disclosure5 days ago

XSSer v.1.9 - "Bl4ck Swarm!" released

Posted by psy on Jul 20 Hi FD, https://xsser.03c8.net --------- "Cross Site "Scripter" (aka XSSer) is an automatic -framework- t…

VULNhighFull Disclosure5 days ago

NotCVE registry index — public records of vulnerabilities that shipped without a CVE

Posted by NotCVE Advisories on Jul 20 ---------------------------------------------------------------------------- https://notcve.…

VULNhighCVE-2026-502977.0 HIGHZero Day Initiative5 days ago

ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-503257.0 HIGHZero Day Initiative5 days ago

ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNCheck Point Research5 days ago

20th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 20th July, please download our Threat Intelligence Bulletin. TOP ATTA…

VULNRecorded Future6 days ago

Threat Hunting: A Guide | Recorded Future

Master modern cyber threat hunting by embracing real-time threat intelligence. Discover the elite tools, steps, and frameworks to…

VULNMicrosoft Security8 days ago

Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks

Join Microsoft Security at Black Hat USA 2026 for supply chain research, hands-on security experiences, expert conversations, and…

VULNcriticalPalo Alto Unit 428 days ago

Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy

A technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escalation and p…

VULNMicrosoft Security9 days ago

ACR Stealer: Two observed intrusion chains amid increased threat activity

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer environm…

VULNPalo Alto Unit 429 days ago

AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report

Explore Unit 42's perspectives on AI's impact on cybersecurity, including key updates since the 2026 Incident Response Report. The…

VULNMicrosoft Security9 days ago

Least privilege for AI agents: Identity, access, and tool binding

As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure. The post…