Tag: vulnerability

SSHole Vulnerability Exploited To Bypass OpenSSH Authentication On Linux Systems

Risk & Resilience
Attackers are exploiting SSHole, a high-severity OpenSSH vulnerability affecting certain Linux configurations, with researchers reporting successful access to an Alpine Linux honeypot.

U.S. Chargé D’Affaires Recognizes Cisco Powered Digital Infrastructure Upgrade At State Bank Of Pakistan

Wired
U.S. Chargé d’Affaires Natalie Baker joined SBP leadership and Cisco Systems Pakistan executives to mark the deployment of a new core banking network and software defined data center.

OpenCode Updates Address MCP Server Vulnerability Affecting Windows And WSL Users

Risk & Resilience
OpenCode has fixed a security flaw that could allow malicious MCP servers to execute code during sign in on Windows and WSL environments.

CVSS 10.0 Bricksforge WordPress Flaw Exploited Through Unauthenticated Remote Code Execution

Risk & Resilience
A critical CVSS 10.0 vulnerability in Bricksforge WordPress plugin is being exploited in the wild, allowing unauthenticated attackers to execute PHP code on affected websites.

Roundcube Webmail SQL Injection Flaw Exploited In Active Cyber Attacks

Risk & Resilience
A patched Roundcube Webmail SQL injection vulnerability CVE-2026-48842 is being actively exploited, allowing unauthenticated attackers to potentially access sensitive email data.

WordPress CVE 2026 87902 Exploitation Begins After Critical Security Patch Release

Risk & Resilience
Attackers are actively exploiting WordPress CVE-2026-87902, a critical vulnerability that could enable remote code execution. Administrators are advised to update affected versions.

Ubuntu Linux Kernel Vulnerability Raises Container Escape Security Concerns

Risk & Resilience
A newly disclosed Linux kernel vulnerability affecting Ubuntu releases could allow container escape and host root access, highlighting the importance of security updates.

WordPress Fixes CVE 2026 93485 Comment2Shell Security Vulnerability

Risk & Resilience
WordPress has released security updates for CVE 2026-93485, a Comment2Shell vulnerability that could allow remote code execution through administrator sessions under specific conditions.

Arista Warns of Active Exploitation of CVE 2026 93952 in VeloCloud Orchestrator

Risk & Resilience
Arista has disclosed an actively exploited CVSS 10.0 vulnerability affecting on premises VeloCloud Orchestrator deployments using certificate based authentication. Security updates are available for select release trains.

GitLab Critical File Read Vulnerability Faces Active Exploitation Attempts

Risk & Resilience
GitLab has patched a critical CVSS 10 vulnerability that could expose sensitive files, with researchers reporting active probes targeting affected systems after disclosure.

Sogou Input Method Vulnerability Enabled UNC3569 GRAYRABBIT Backdoor Deployment

Risk & Resilience
UNC3569 exploited a Sogou Input Method vulnerability to deploy GRAYRABBIT backdoor, giving attackers remote access capabilities on targeted Windows systems.

VMware Workstation And Fusion Security Flaws Enable Host Code Execution

Risk & Resilience
Broadcom has patched critical VMware Workstation and Fusion vulnerabilities that could allow attackers with local administrative access to execute arbitrary code on host systems.

Critical Cosmos EVM Vulnerability Impacts Multiple Blockchain Networks

Risk & Resilience
Cosmos Labs has disclosed details of a critical Cosmos EVM vulnerability that was exploited across six blockchain networks, prompting urgent upgrade recommendations for affected chain operators.

Security Research Reveals Critical Unitree G1 EDU Root RCE Vulnerabilities

Risk & Resilience
Security researcher Olivier Laflamme has disclosed two critical vulnerabilities affecting the Unitree G1 EDU humanoid robot that could allow root remote code execution through network and Bluetooth attack paths.
123Page 1 of 3

Recent articles

spot_img