Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

VULNRecorded Future3 months ago

Recorded Future Named a Leader in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies. And there’s more.

Recorded Future shares exciting developments since being named a leader.

VULNRecorded Future3 months ago

Threat Activity Enablers: The Backbone of Today’s Threat Landscape

Behind every ransomware demand, botnet, or threat activity group is a server sitting in a data center.

VULNCVE-2026-314317.8 HIGHPalo Alto Unit 423 months ago

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years

Copy Fail (CVE-2026-31431) is a critical Linux kernel LPE that allows stealthy root access. This flaw impacts millions of systems.…

VULNhighRecorded Future3 months ago

Hacking Embodied AI

Embodied AI, intelligent systems in physical forms such as humanoid and quadruped robots, is moving from spectacle to staffing pla…

VULNCheck Point Research3 months ago

4th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 4th May, please download our Threat Intelligence Bulletin. TOP ATTACK…

VULNPalo Alto Unit 423 months ago

Essential Data Sources for Detection Beyond the Endpoint

Unit 42 highlights the need for a comprehensive security strategy that spans every IT zone. Explore the full details here. The pos…

VULNhighCVE-2026-412659.8 CRITICALZero Day Initiative3 months ago

ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not r…

VULNRecorded Future3 months ago

The Iran War: What You Need to Know

Insikt Group tracks the cyber, physical, and geopolitical components of the US-Israeli strikes on Iran — with continuously updated…

VULNPalo Alto Unit 423 months ago

That AI Extension Helping You Write Emails? It’s Reading Them First

Unit 42 uncovers high-risk AI browser extensions. Disguised as productivity tools, they steal data, intercept prompts, and exfiltr…

VULNRecorded Future3 months ago

Building with AI: Here's What No Briefing Will Tell You

What building with AI for three months revealed about four leadership blind spots executives can't afford to ignore: the comprehen…

VULNRecorded Future3 months ago

Risk Scenarios for the US’s Strategic Pivot

The United States (US) is shifting toward a more force-driven security strategy primarily relying on military operations and econo…

VULNhighCVE-2026-419409.8 CRITICALwatchTowr Labs3 months ago

The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)

Hello! Yes, it's all a disaster again! Let's get this party started: 0:00…

VULNCheck Point Research3 months ago

VECT: Ransomware by design, Wiper by accident

Key Takeaways Background VECT Ransomware is a Ransomware-as-a-Service (RaaS) program that made its first appearance in December 20…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-305: (0Day) OpenAI Codex Sandbox Escape Vulnerability

This vulnerability allows remote attackers to bypass the sandbox on affected installations of OpenAI Codex. User interaction is re…

VULNhighCVE-2026-352307.5 HIGHZero Day Initiative3 months ago

ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must…

VULNRecorded Future3 months ago

The Money Mule Solution: What Every Scam Has in Common

Learn how mule account intelligence — not tactic-tracking — is the most effective lever for preventing APP fraud before funds move…

VULNRecorded Future3 months ago

Lazarus Doesn't Need AGI

Explore the 2026 Claude Mythos breach, supply chain risks, and the $2B+ crypto theft pipeline.

VULNCheck Point Research3 months ago

27th April – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 27th April, please download our Threat Intelligence Bulletin. TOP ATT…

VULNhighCVE-2026-59425.5 MEDIUMZero Day Initiative3 months ago

ZDI-26-303: Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User i…

VULNhighCVE-2026-59417.8 HIGHZero Day Initiative3 months ago

ZDI-26-302: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-412769.8 CRITICALZero Day Initiative3 months ago

ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Flowise. Authentication is not re…

VULNhighCVE-2026-59407.8 HIGHZero Day Initiative3 months ago

ZDI-26-301: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-59437.8 HIGHZero Day Initiative3 months ago

ZDI-26-304: Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNRecorded Future3 months ago

From Overwhelmed to Autonomous: Rethinking Threat Intelligence in 2026

For most security teams today, volume and access to intelligence isn’t the problem. It’s the speed at which they can turn that int…

VULNSentinelOne Labs3 months ago

fast16 | Mystery Shadow Brokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

A previously unknown 2005 cyber sabotage framework patches high-precision calculation software in memory to silently corrupt resul…

VULNhighMandiant3 months ago

Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

Written by: JP Glab, Tufail Ahmed, Josh Kelley, Muhammad Umair Introduction Google Threat Intelligence Group (GTIG) identified…

VULNhighCVE-2026-64068.8 HIGHZero Day Initiative3 months ago

ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must fir…

VULNhighCVE-2026-256548.8 HIGHZero Day Initiative3 months ago

ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication i…

VULNhighCVE-2026-57267.8 HIGHZero Day Initiative3 months ago

ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. Use…

VULNhighCVE-2026-240327.3 HIGHZero Day Initiative3 months ago

ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Siemens SINEC NMS. Authentication…