Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

937 articles

VULNhighCVE-2026-59437.8 HIGHZero Day Initiative4 months ago

ZDI-26-304: Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNRecorded Future4 months ago

From Overwhelmed to Autonomous: Rethinking Threat Intelligence in 2026

For most security teams today, volume and access to intelligence isn’t the problem. It’s the speed at which they can turn that int…

VULNSentinelOne Labs4 months ago

fast16 | Mystery Shadow Brokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

A previously unknown 2005 cyber sabotage framework patches high-precision calculation software in memory to silently corrupt resul…

VULNhighMandiant4 months ago

Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

Written by: JP Glab, Tufail Ahmed, Josh Kelley, Muhammad Umair Introduction Google Threat Intelligence Group (GTIG) identified…

VULNhighCVE-2026-240327.3 HIGHZero Day Initiative4 months ago

ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Siemens SINEC NMS. Authentication…

VULNhighCVE-2026-57267.8 HIGHZero Day Initiative4 months ago

ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. Use…

VULNhighCVE-2026-256548.8 HIGHZero Day Initiative4 months ago

ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication i…

VULNhighCVE-2026-64068.8 HIGHZero Day Initiative4 months ago

ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must fir…

VULNcriticalRecorded Future4 months ago

Critical minerals and cyber operations

Learn how critical minerals and rare earth elements (REEs) are evolving from commodities into strategic flashpoints. Explore the g…

VULNRecorded Future4 months ago

Today, trust is the superpower that makes innovation possible

How better intelligence and collaboration can unlock new opportunities for growth and greater financial health for more people.

VULNSentinelOne Labs4 months ago

LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?

Marc Rogers and Silas Cutler expose how cheap smart home devices conceal a shadow supply chain of shell companies, firmware flaws,…

VULNRecorded Future4 months ago

Evolution of Chinese-Language Guarantee Telegram Marketplaces

Chinese-language, Telegram-based “guarantee” marketplaces are increasingly popular among Chinese-speaking criminal groups despite…

VULNhighRecorded Future4 months ago

AI Hype vs. Reality: Is AI Really Rewriting the Vulnerability Equation?

AI vulnerability research and discovery capabilities are improving, but they have not changed the fundamentals of vulnerability ma…

VULNcriticalCVE-2026-50599.8 CRITICALZero Day Initiative4 months ago

ZDI-26-245: (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication i…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-293: (0Day) Microsoft Office URI Handler NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Office. User interact…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-295: (0Day) PublicCMS getXml Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PublicCMS. Authenticatio…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-294: (0Day) Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Microsoft Wind…

VULNRecorded Future4 months ago

Emerging Enterprise Security Risks of AI

Agentic AI adoption is accelerating rapidly as enterprise software and applications increasingly incorporate task-specific AI agen…

VULNCheck Point Research4 months ago

20th April – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 20th April, please download our Threat Intelligence Bulletin. TOP ATT…

VULNCheck Point Research4 months ago

DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy

Key Points The Gentlemen RaaS The Gentlemen ransomware‑as‑a‑service (RaaS) operation is a relatively new group that emerged around…

VULNRecorded Future4 months ago

4 Essential Integration Workflows for Operationalizing Threat Intelligence Recorded Future

Learn how to integrate threat intelligence into your existing security stack with Recorded Future. Explore four stages of cyber ma…

VULNhighMandiant4 months ago

Defending Your Enterprise When AI Models Can Find Vulnerabilities Faster Than Ever

Introduction Advances in AI model-powered exploitation have demonstrated that general-purpose AI models can excel at vulnerabilit…

VULNRecorded Future4 months ago

From Bazooka to Fake Nikes

A deep dive into business impersonation fraud — from fake companies cashing stolen checks to AI-powered shopping scams — and why t…

VULNMandiant4 months ago

The German Cyber Criminal Überfall: Shifts in Europe's Data Leak Landscape

Written by: Jamie Collier, Robin Grunewald Germany has reclaimed its position as a primary focus for cyber extortion in Europe.…

VULNhighCVE-2026-4682Zero Day Initiative4 months ago

ZDI-26-280: (Pwn2Own) HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP DeskJet 2855e print…

VULNhighCVE-2026-5057Zero Day Initiative4 months ago

ZDI-26-272: ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ATEN Unizon. Authe…

VULNhighCVE-2026-20507.8 HIGHZero Day Initiative4 months ago

ZDI-26-282: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-406887.2 HIGHZero Day Initiative4 months ago

ZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiWeb. Authenticatio…

VULNhighZero Day Initiative4 months ago

ZDI-26-267: Malwarebytes Anti-Malware Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Anti-Malware. An attack…

VULNhighZero Day Initiative4 months ago

ZDI-26-273: Microsoft Olive Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Olive. User interactio…