attack_FeedLIVE

Vulnerability Alerts

Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNCVE-2026-568157.4 HIGHFull Disclosure4 months ago

pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root

Posted by Greg via Fulldisclosure on Jul 02 1. Advisory information https://github.com/GregDurys/security-advisories GHSA: GHSA-2v…

VULNhighFull Disclosure4 months ago

[KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability

Posted by Egidio Romano on Jul 02 --------------------------------------------------------------------- https://control-webpanel.c…

VULNhighCVE-2026-584516.5 MEDIUMFull Disclosure4 months ago

[fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln

Posted by ㅤevan via Fulldisclosure on Jul 02 this is my first time sending to a mailing list so ive chosen something easy. here go…

VULNFull Disclosure4 months ago

Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended)

Posted by 490h3fqwomf via Fulldisclosure on Jul 02 Hello Full Disclosure, The following publicly available research describes a B…

VULNFull Disclosure4 months ago

Asterisk Security Release 23.4.1

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure4 months ago

Asterisk Security Release 22.10.1

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure4 months ago

Asterisk Security Release 21.12.3

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure4 months ago

Asterisk Security Release 20.20.1

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure4 months ago

Certified Asterisk Security Release certified-22.8-cert3

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure4 months ago

Certified Asterisk Security Release certified-20.7-cert11

Posted by Asterisk Development Team via Fulldisclosure on Jul 02 The Asterisk Development Team would like to announce security rel…

VULNFull Disclosure4 months ago

Zig std.http chunked reader integer overflow -> unauthenticated remote DoS

Posted by Agent Spooky's Fun Parade via Fulldisclosure on Jul 02 Agent Spooky’s Fun Parade hereby reports, with the solemnity of a…

VULNwatchTowr Labs4 months ago

It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)

We’re back, melting - we’ve tried shouting, screaming, and throwing things at the Sun, and it is just not working. Before we begin…

VULNMicrosoft Security4 months ago

Improving security posture across the Microsoft partner ecosystem

Read how Microsoft strengthens partner ecosystem security with CSP vetting, least privilege access, monitoring, and risk managemen…

VULNhighSentinelOne Labs4 months ago

Context Engineering | Compaction & Agent Memory for Automated Malware Analysis

Compaction cut input tokens 86% across long-running agent evals with no quality loss. Context discipline matters as much as model…

VULNRecorded Future4 months ago

Recorded FutureがGartner® サイバー脅威インテリジェンス・テクノロジー部門のMagic Quadrant™のリーダーの１社に位置づけられました。

Gartnerがサイバー脅威インテリジェンスのマジック・クアドラントのリーダーの１社と評価 — 能動的サイバー防御法施行を前に、日本企業が今すべきこと

VULNMicrosoft Security4 months ago

Microsoft named a leader in the Frost Radar for cloud and application runtime security

Frost & Sullivan names Microsoft a leader as cloud and application security converge into unified, runtime risk reduction. The pos…

VULNCheck Point Research4 months ago

Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique

Research by: Alexey Bukhteyev Key Takeaways Introduction Over the past several years, large language models have reshaped software…

VULNPalo Alto Unit 424 months ago

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn more…

VULNRecorded Future4 months ago

Iran-Nexus TAG-182 Disseminates MarkiRAT Surveillance Tool

Discover how Iranian-nexus threat cluster TAG-182 uses MarkiRAT malware and fake VPN/media apps to conduct cyber surveillance oper…

VULNhighCVE-2026-84517.5 HIGHwatchTowr Labs4 months ago

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)

Well, well, well - once again, the cat has dragged us in, and spat us out. Today, we find ourselves questioning the reality we sit…

VULNMicrosoft Security4 months ago

Accelerating the quantum-safe timeline

We’re accelerating quantum-safe readiness—and sharing what organizations can do now to transition earlier and with confidence. The…

VULNMicrosoft Security4 months ago

What’s new in Microsoft Security: June 2026

This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it lives, an…

VULNMicrosoft Security4 months ago

Securing AI agents: When AI tools move from reading to acting

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool description…

VULNhighCVE-2026-80379.6 CRITICALwatchTowr Labs4 months ago

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)

Welcome back to another watchTowr Labs blog post. This time, we're looking at Progress Kemp LoadMaster, a load balancer that sits…

VULNMicrosoft Security4 months ago

Chromium extension uses AI‑related branding to redirect browser search

A malicious Chromium-based extension that spoofs the AI-powered answer engine Perplexity AI redirects browser search traffic using…

VULNCheck Point Research4 months ago

29th June – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 29th June, please download our Threat Intelligence Bulletin. TOP ATTA…

VULNMicrosoft Security4 months ago

Photo ZIP campaign targeting hospitality industry delivers Node.js implant for persistent access

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in Europe an…

VULNcriticalPalo Alto Unit 424 months ago

CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure

Government entities and critical infrastructure were targeted for espionage in SE Asia by attackers using a hybrid toolkit, includ…

VULNMicrosoft Security4 months ago

Microsoft a Leader in The Forrester Wave™ for Endpoint Management Platforms

Microsoft named a Leader in the Forrester Wave™: Endpoint Management Platforms, Q2 2026, with the highest scores in the current of…

VULNRecorded Future4 months ago

Evaluating Mexico’s New Cybersecurity Plan

Explore an analysis of Mexico’s 2025–2030 National Cybersecurity Plan. Discover how Mexico is addressing critical threats like ran…