Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-6071Zero Day Initiative3 months ago

ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simula…

VULNhighCVE-2026-81087.8 HIGHZero Day Initiative3 months ago

ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker mu…

VULNhighCVE-2026-81087.8 HIGHZero Day Initiative3 months ago

ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Fuji Electric Tellu…

VULNhighCVE-2026-22917.3 HIGHZero Day Initiative3 months ago

ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of dnsmasq. Authentication is not r…

VULNhighZero Day Initiative3 months ago

ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighZero Day Initiative3 months ago

ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighCVE-2026-142667.0 HIGHZero Day Initiative3 months ago

ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is requi…

VULNRecorded Future3 months ago

The Shift: A New Era of AI Regulation

Explore how recent US export controls on frontier AI models like Anthropic's Fable signal a new era of regulatory uncertainty. Lea…

VULNCheck Point Research3 months ago

AI Security Report 2026

For years, the cyber security industry tracked AI as a force multiplier: something that made existing attack techniques faster, ch…

VULNRecorded Future3 months ago

The FBI Warned About Fake Permit Fees. The Harder Question Is Where the Money Goes. | Recorded Future

A government impersonation scam is targeting property owners with fake planning and zoning permit invoices, and authorized wire tr…

VULNMicrosoft Security3 months ago

Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ShinyHunters,…

VULNMicrosoft Security3 months ago

Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID

Microsoft Entra ID makes passkeys the default sign-in experience and introduces a new model for SMS and voice authentication. Read…

VULNCheck Point Research3 months ago

13th July – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 13th July, please download our Threat Intelligence Bulletin. TOP ATTA…

VULNPalo Alto Unit 424 months ago

No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more here. The…

VULNMicrosoft Security4 months ago

Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative

Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready c…

VULNRecorded Future4 months ago

June 2026 CVE Landscape

In June 2026, Insikt Group® identified 60 high-impact vulnerabilities that should be prioritized for remediation, 30 of which had…

VULNhighMicrosoft Security4 months ago

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platf…

VULNSentinelOne Labs4 months ago

One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement

China and India ran separate espionage operations against the same Pakistani police force, each drawn by different stakes in Pakis…

VULNhighFull Disclosure4 months ago

[REVIVE-SA-2026-003] Revive Adserver Vulnerabilities

Posted by Matteo Beccati on Jul 08 ======================================================================== https://www.revive-ads…

VULNRecorded Future4 months ago

RiskX interview video featuring Colin Mahony and Mastercard's Aditi Sawhney

Recorded Future CEO Colin Mahony and Mastercard’s Aditi Sawhney discuss the convergence of cyber and financial crime. Explore how…

VULNMicrosoft Security4 months ago

Protecting Microsoft at AI speed: How SFI proactively hardens our cloud

At Microsoft we encompass these security requirements, along with threat knowledge, and operational frameworks in our Secure Futur…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attack…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentica…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacke…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacke…

VULNcriticalZero Day Initiative4 months ago

ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi…

VULNExploit-DB4 months ago

[webapps] Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure

Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure

VULNRecorded Future4 months ago

The Threat Isn’t the Frontier Model

The real AI threat isn't frontier models. It's cheap local models getting easier to run. Here's why CISOs should build defensive a…

VULNExploit-DB4 months ago

[webapps] Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

Joomla Page Builder CK 3.5.10 - Arbitrary File Upload