60
60
60
Week in review: F5 BIG-IP RCE exploitation, URL spoofing flaws in Zoom, Google Docs
60
60
60
60
60
60
60
60
60
Week in review: Exploited zero-day in Cisco email security appliances, Kali Linux 2025.4 released
60
60
60
60
Week in review: Probing activity on Palo Alto Networks GlobalProtect portals, Patch Tuesday forecast
60
60
60
60
60
60
60
60
Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixed
60
60
60
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024
60
60
60
Auth bypass CVE-2025
60
Patch Tuesday Lowdown, July 2019 Edition
60
60
60
CVE-2026-16232: Check Point SmartConsole Auth Bypass
Check Point SmartConsole authentication bypass CVE-2026-16232 grants unauthenticated attackers full admin access; actively exploited and added to CISA KEV.
CVE-2026-16232 is an improper authentication flaw (CWE-287) in the Check Point SmartConsole login process that lets an unauthenticated remote attacker obtain an application token and authenticate with full administrative privileges. Exploitation requires the Management Server to be internet-reachable and the Trusted Clients list not restricted to specific administrator addresses. Check Point confirmed active exploitation affecting a small number of customers, and the vulnerability has been added to the CISA Known Exploited Vulnerabilities catalog. A hotfix is available via Check Point advisory sk185169.
75
60
60
60
60
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
60