Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

936 articles

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

Executive Summary Since our February 2026 report on AI-related threat activity, Google Threat Intelligence Group (GTIG) has contin…

VULNCheck Point Research4 months ago

11th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 11th May, please download our Threat Intelligence Bulletin. TOP ATTAC…

VULNCheck Point Research4 months ago

The State of Ransomware – Q1 2026

Key Findings Ransomware in Q1 2026: Consolidation at Scale During the first quarter of 2026, we monitored more than 70 active data…

VULNRecorded Future4 months ago

Working in London at the World’s Largest Intelligence Company

See what it is like to work at the Recorded Future London office.

VULNSentinelOne Labs4 months ago

PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale

Cloud attack framework skips cryptomining, harvests financial, messaging, and enterprise credentials for fraud, spam, and potentia…

VULNcriticalCVE-2026-03009.8 CRITICALPalo Alto Unit 424 months ago

Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution

Unit 42 details CVE-2026-0300, a buffer overflow vulnerability in the PAN-OS User-ID Authentication Portal. Read now for details.…

VULNRecorded Future4 months ago

Quantum Risk Explained

Learn how the "Harvest Now, Decrypt Later" (HNDL) risk exposes long-lived sensitive data today, regardless of when Cryptographical…

VULNSentinelOne Labs4 months ago

LABScon25 Replay | Please Connect to the Foreign Entity to Enhance Your User Experience

Joe FitzPatrick reveals how consumer imports of networked devices pose a real security risk to small businesses and critical infra…

VULNRecorded Future4 months ago

Threat Activity Enablers: The Backbone of Today’s Threat Landscape

Behind every ransomware demand, botnet, or threat activity group is a server sitting in a data center.

VULNRecorded Future4 months ago

Recorded Future Named a Leader in the 2026 Gartner® Magic Quadrant™ for Cyberthreat Intelligence Technologies. And there’s more.

Recorded Future shares exciting developments since being named a leader.

VULNCVE-2026-314317.8 HIGHPalo Alto Unit 424 months ago

Copy Fail: What You Need to Know About the Most Severe Linux Threat in Years

Copy Fail (CVE-2026-31431) is a critical Linux kernel LPE that allows stealthy root access. This flaw impacts millions of systems.…

VULNhighRecorded Future4 months ago

Hacking Embodied AI

Embodied AI, intelligent systems in physical forms such as humanoid and quadruped robots, is moving from spectacle to staffing pla…

VULNCheck Point Research4 months ago

4th May – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 4th May, please download our Threat Intelligence Bulletin. TOP ATTACK…

VULNPalo Alto Unit 424 months ago

Essential Data Sources for Detection Beyond the Endpoint

Unit 42 highlights the need for a comprehensive security strategy that spans every IT zone. Explore the full details here. The pos…

VULNhighCVE-2026-412659.8 CRITICALZero Day Initiative4 months ago

ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not r…

VULNRecorded Future4 months ago

The Iran War: What You Need to Know

Insikt Group tracks the cyber, physical, and geopolitical components of the US-Israeli strikes on Iran — with continuously updated…

VULNPalo Alto Unit 424 months ago

That AI Extension Helping You Write Emails? It’s Reading Them First

Unit 42 uncovers high-risk AI browser extensions. Disguised as productivity tools, they steal data, intercept prompts, and exfiltr…

VULNRecorded Future4 months ago

Risk Scenarios for the US’s Strategic Pivot

The United States (US) is shifting toward a more force-driven security strategy primarily relying on military operations and econo…

VULNRecorded Future4 months ago

Building with AI: Here's What No Briefing Will Tell You

What building with AI for three months revealed about four leadership blind spots executives can't afford to ignore: the comprehen…

VULNhighCVE-2026-419409.8 CRITICALwatchTowr Labs4 months ago

The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)

Hello! Yes, it's all a disaster again! Let's get this party started: 0:00…

VULNCheck Point Research4 months ago

VECT: Ransomware by design, Wiper by accident

Key Takeaways Background VECT Ransomware is a Ransomware-as-a-Service (RaaS) program that made its first appearance in December 20…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-305: (0Day) OpenAI Codex Sandbox Escape Vulnerability

This vulnerability allows remote attackers to bypass the sandbox on affected installations of OpenAI Codex. User interaction is re…

VULNhighCVE-2026-352307.5 HIGHZero Day Initiative4 months ago

ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must…

VULNRecorded Future4 months ago

The Money Mule Solution: What Every Scam Has in Common

Learn how mule account intelligence — not tactic-tracking — is the most effective lever for preventing APP fraud before funds move…

VULNRecorded Future4 months ago

Lazarus Doesn't Need AGI

Explore the 2026 Claude Mythos breach, supply chain risks, and the $2B+ crypto theft pipeline.

VULNCheck Point Research4 months ago

27th April – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 27th April, please download our Threat Intelligence Bulletin. TOP ATT…

VULNhighCVE-2026-59425.5 MEDIUMZero Day Initiative4 months ago

ZDI-26-303: Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User i…

VULNhighCVE-2026-59407.8 HIGHZero Day Initiative4 months ago

ZDI-26-301: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-412769.8 CRITICALZero Day Initiative4 months ago

ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Flowise. Authentication is not re…

VULNhighCVE-2026-59417.8 HIGHZero Day Initiative4 months ago

ZDI-26-302: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…