Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

937 articles

A New Way to Buy Recorded Future: Solutions and Packages Built for the 2026 Threat Landscape

Recorded Future is rolling out new pricing and packaging that bundles its intelligence capabilities into four solutions and three…

VULNRecorded Future4 months ago

Iran War: Future Scenario and Business Implications

Iran War: Future Scenarios and Business Implications

VULNcriticalRecorded Future4 months ago

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Day

March 2026 saw a 139% increase in high-impact vulnerabilities, with Recorded Future's Insikt Group® identifying 31 vulnerabilities…

VULNRecorded Future5 months ago

VIP Credential Monitoring Blog

Executives and high-privilege users are prime targets for credential theft — and standard monitoring often misses them. Learn how…

VULNRecorded Future5 months ago

Third-Party Risk Is an Intelligence Operation. It's Time We Treated It Like One.

Recorded Future sees its inclusion in the 2026 Forrester Wave™ for Cybersecurity Risk Ratings Platforms as a reflection of a broad…

VULNRecorded Future5 months ago

Understanding and Anticipating Venezuelan Government Actions

Explore an in-depth analysis of Venezuela’s political landscape following the January 2026 US operation to capture Nicolás Maduro.…

VULNcriticalCVE-2026-54937.8 HIGHZero Day Initiative5 months ago

ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. U…

VULNcriticalCVE-2026-54947.8 HIGHZero Day Initiative5 months ago

ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. U…

VULNcriticalCVE-2026-54957.8 HIGHZero Day Initiative5 months ago

ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. U…

VULNcriticalCVE-2026-54967.8 HIGHZero Day Initiative5 months ago

ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. U…

VULNRecorded Future5 months ago

Day in the Life: Product Manager at Recorded Future

VentureFizz interviews Senior Product Manager Kyle Kohler on his role at Recorded Future

VULNhighMandiant5 months ago

vSphere and BRICKSTORM Malware: A Defender's Guide

Written by: Stuart Carrera Introduction Building on recent BRICKSTORM research from Google Threat Intelligence Group (GTIG), th…

VULNhighCVE-2026-26999.8 CRITICALwatchTowr Labs5 months ago

You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)

If you squint and look at the CISA KEV list, you might think it's made up exclusively of vulnerabilities in file transfer solution…

VULNhighCVE-2026-37757.8 HIGHZero Day Initiative5 months ago

ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must f…

VULNhighCVE-2026-215188.8 HIGHZero Day Initiative5 months ago

ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. Us…

VULNhighCVE-2026-46989.8 CRITICALZero Day Initiative5 months ago

ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mozilla Firefox. User interactio…

VULNRecorded Future5 months ago

Panorama del cibercrimen en América Latina y el Caribe

Este informe ofrece una visión general de las tendencias y desarrollos en el ecosistema cibercriminal de América Latina y el Carib…

VULNRecorded Future5 months ago

Latin America and the Caribbean Cybercrime Landscape

This report provides an overview of trends and developments in the cybercriminal ecosystem of Latin America and the Caribbean (LAC…

VULNRecorded Future5 months ago

Panorama do cibercrime na América Latina e Caribe

Este relatório oferece uma visão geral das tendências e desenvolvimentos no ecossistema cibercriminoso da América Latina e do Cari…

VULNRecorded Future5 months ago

Industrialization of the Fraud Ecosystem Blog

Payment fraud has industrialized, and that's a defensive advantage. Learn how standardized attack infrastructure creates detectabl…

VULNRecorded Future5 months ago

The Shift: An Era of Quantum Geopolitics

The expanding conflict around Iran signals a deeper shift. We have entered an era of quantum geopolitics, where the old rules of t…

VULNMandiant5 months ago

North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

Written by: Austin Larsen, Dima Lenz, Adrian Hernandez, Tyler McLellan, Christopher Gardner, Ashley Zaya, Michael Rudden, Mon Licl…

VULNhighCVE-2026-230927.8 HIGHZero Day Initiative5 months ago

ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighCVE-2025-628436.8 MEDIUMZero Day Initiative5 months ago

ZDI-26-237: (Pwn2Own) QNAP QHora-322 ip6_wanifset Improper Restriction of Communication Channel to Intended Endpoints Firewall Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass firewall rules on affected installations of QNAP QHora-322 routers.…

VULNhighCVE-2026-09567.8 HIGHZero Day Initiative5 months ago

ZDI-26-234: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interacti…

VULNhighCVE-2026-09557.8 HIGHZero Day Initiative5 months ago

ZDI-26-233: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interacti…

VULNhighCVE-2026-206906.5 MEDIUMZero Day Initiative5 months ago

ZDI-26-230: Apple macOS CoreMedia Framework Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is…

VULNhighCVE-2026-09577.8 HIGHZero Day Initiative5 months ago

ZDI-26-235: Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interacti…

VULNhighCVE-2026-09547.8 HIGHZero Day Initiative5 months ago

ZDI-26-236: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interacti…

VULNhighCVE-2023-62707.0 HIGHZero Day Initiative5 months ago

ZDI-26-238: Linux Kernel AoE Driver Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…