Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

Critical minerals and cyber operations

Learn how critical minerals and rare earth elements (REEs) are evolving from commodities into strategic flashpoints. Explore the g…

VULNRecorded Future3 months ago

Today, trust is the superpower that makes innovation possible

How better intelligence and collaboration can unlock new opportunities for growth and greater financial health for more people.

VULNSentinelOne Labs3 months ago

LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?

Marc Rogers and Silas Cutler expose how cheap smart home devices conceal a shadow supply chain of shell companies, firmware flaws,…

VULNhighRecorded Future3 months ago

AI Hype vs. Reality: Is AI Really Rewriting the Vulnerability Equation?

AI vulnerability research and discovery capabilities are improving, but they have not changed the fundamentals of vulnerability ma…

VULNRecorded Future3 months ago

Evolution of Chinese-Language Guarantee Telegram Marketplaces

Chinese-language, Telegram-based “guarantee” marketplaces are increasingly popular among Chinese-speaking criminal groups despite…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-295: (0Day) PublicCMS getXml Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PublicCMS. Authenticatio…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-293: (0Day) Microsoft Office URI Handler NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Office. User interact…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-294: (0Day) Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Microsoft Wind…

VULNcriticalCVE-2026-50599.8 CRITICALZero Day Initiative3 months ago

ZDI-26-245: (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication i…

VULNRecorded Future3 months ago

Emerging Enterprise Security Risks of AI

Agentic AI adoption is accelerating rapidly as enterprise software and applications increasingly incorporate task-specific AI agen…

VULNCheck Point Research3 months ago

20th April – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 20th April, please download our Threat Intelligence Bulletin. TOP ATT…

VULNCheck Point Research3 months ago

DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy

Key Points The Gentlemen RaaS The Gentlemen ransomware‑as‑a‑service (RaaS) operation is a relatively new group that emerged around…

VULNRecorded Future3 months ago

4 Essential Integration Workflows for Operationalizing Threat Intelligence Recorded Future

Learn how to integrate threat intelligence into your existing security stack with Recorded Future. Explore four stages of cyber ma…

VULNhighMandiant3 months ago

Defending Your Enterprise When AI Models Can Find Vulnerabilities Faster Than Ever

Introduction Advances in AI model-powered exploitation have demonstrated that general-purpose AI models can excel at vulnerabilit…

VULNRecorded Future3 months ago

From Bazooka to Fake Nikes

A deep dive into business impersonation fraud — from fake companies cashing stolen checks to AI-powered shopping scams — and why t…

VULNMandiant3 months ago

The German Cyber Criminal Überfall: Shifts in Europe's Data Leak Landscape

Written by: Jamie Collier, Robin Grunewald Germany has reclaimed its position as a primary focus for cyber extortion in Europe.…

VULNhighCVE-2026-340547.8 HIGHZero Day Initiative3 months ago

ZDI-26-281: Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on applications built using the Microsoft vcpkg port of OpenSSL.…

VULNhighCVE-2025-710667.5 HIGHZero Day Initiative3 months ago

ZDI-26-289: Linux Kernel ETS Scheduler Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighCVE-2026-5490Zero Day Initiative3 months ago

ZDI-26-286: DriveLock SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is requir…

VULNhighCVE-2026-228989.8 CRITICALZero Day Initiative3 months ago

ZDI-26-292: QNAP TS-453E QVRPro excpostgres Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices.…

VULNhighCVE-2026-320737.0 HIGHZero Day Initiative3 months ago

ZDI-26-277: Microsoft Windows afd.sys Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNcriticalZero Day Initiative3 months ago

ZDI-26-260: (0Day) Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must fir…

VULNhighZero Day Initiative3 months ago

ZDI-26-267: Malwarebytes Anti-Malware Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Anti-Malware. An attack…

VULNhighCVE-2026-5057Zero Day Initiative3 months ago

ZDI-26-272: ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ATEN Unizon. Authe…

VULNhighCVE-2026-5424Zero Day Initiative3 months ago

ZDI-26-271: Avast Premium Security Gen Self Protection Driver Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Avast Premium Security. An attacker…

VULNhighZero Day Initiative3 months ago

ZDI-26-273: Microsoft Olive Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Olive. User interactio…

VULNhighZero Day Initiative3 months ago

ZDI-26-274: Microsoft Qlib fit Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Qlib. User interaction…

VULNhighZero Day Initiative3 months ago

ZDI-26-275: Microsoft Qlib _mount_nfs_uri Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Microsoft Qlib. Authen…

VULNhighCVE-2026-328607.8 HIGHZero Day Initiative3 months ago

ZDI-26-290: NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI LabVIEW. User interaction is…

VULNhighCVE-2026-5489Zero Day Initiative3 months ago

ZDI-26-285: DriveLock Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authenticatio…