Search: “action auditing”

56 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 144 Data breach 128 Exploit / PoC 111 Vulnerability 56 Threat actor 24 Malware 16 Policy & legal 15 AI safety & security 12 AI industry 4 Advisory 3 Phishing & fraud 3 Model release 1 AI policy 1

SeverityAll critical 463 high 36 medium 9 low 0 info 10

Review: Action1 – Simple and powerful patch management

Help Net SecurityAug 2, 04:43 UTC · Aug 2, 2024Vulnerability in the wild

December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat Activity

Recorded FutureJan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182 CVE-2025-20393 CVE-2025-8110+1 CVEs

ConnectSecure’s Patch 360 gives MSPs control over patch testing and deployment

Help Net SecurityJun 8, 00:00 UTC · Jun 8, 2026Vulnerability in the wild

Container security requires continuous security in new DevSecOps models

Help Net SecurityJan 22, 00:00 UTC · Jan 22, 2020Vulnerability CVE-2018-10021051

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected

The Hacker NewsJan 29, 06:05 UTC · Jan 29, 2026Vulnerability in the wildCVE-2026-24858

Binarly Transparency Platform 3.0 prioritizes vulnerabilities based on active exploitation

Help Net SecurityApr 24, 00:00 UTC · Apr 24, 2025Vulnerability in the wild

When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Vulnerability in the wild

NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions

The Hacker NewsApr 17, 13:10 UTC · Apr 17, 2026Vulnerability in the wild

January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero

Recorded FutureFeb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509 CVE-2026-23760 CVE-2026-1281+1 CVEs1

Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat Actors

Recorded FutureDec 9, 00:00 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-55182

Five zero days affecting Aethon hospital autonomous robots patched

The RecordJan 13, 00:00 UTC · Jan 13, 2023Vulnerability CVE-2022-1066 CVE-2022-26423 CVE-2022-1070+2 CVEs

February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from January

Recorded FutureMar 13, 00:00 UTC · Mar 13, 2026Vulnerability in the wildCVE-2025-15556 CVE-2026-21513 CVE-2026-21533+4 CVEs1

Infection Monkey: Open source tool allows zero trust assessment of AWS environments

Help Net SecurityApr 20, 09:57 UTC · Apr 20, 2026Vulnerability CVE-2020-1472 CVE-2019-6340

Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 Bugs

The Hacker NewsSep 11, 08:56 UTC · Sep 11, 2025Vulnerability in the wildCVE-2025-53791 CVE-2025-55234 CVE-2025-54914+9 CVEs

New Microsoft Exchange Vulnerability Puts Hybrid Cloud Environments at

Infosecurity MagazineAug 7, 15:00 UTC · Aug 7, 2025Vulnerability in the wildCVE-2025-53786

Week in review: Tips for starting your cybersecurity career, Patch Tuesday forecast

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2024Vulnerability CVE-2024-42219 CVE-2024-42218 CVE-2024-38856+2 CVEs1

Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast

Help Net SecurityMar 8, 00:00 UTC · Mar 8, 2026Vulnerability CVE-2025-14500 CVE-2026-28289 CVE-2026-20128+1 CVEs

Critical Kubernetes privilege escalation flaw patched, update ASAP!

Help Net SecurityDec 5, 00:00 UTC · Dec 5, 2018Vulnerability CVE-2018-1002105

RCE Vulnerability Found in RomethemeKit For Elementor Plugin

Infosecurity MagazineMay 19, 16:00 UTC · May 19, 2025Vulnerability CVE-2025-30911

Product showcase: SecAlerts - Relevant, actionable, up-to-the-minute vulnerability alerts

Help Net SecurityNov 17, 00:00 UTC · Nov 17, 2025Vulnerability in the wild

Mythos can find the vulnerability. It can't tell you what to do about it.

CyberScoopApr 21, 10:00 UTC · Apr 21, 2026Vulnerability in the wild1

CVE-2026-50522: Microsoft SharePoint Server RCE Vulnerability

CVE-2026-50522 is an unauthenticated .NET deserialization RCE in SharePoint Server Subscription, 2019, and 2016; Microsoft patched it July 14, 2026.

CVE-2026-50522 (CWE-502) lets unauthenticated attackers send crafted serialized .NET payloads to network-accessible SharePoint endpoints, triggering gadget-chain deserialization and remote code execution under the privileged SharePoint service account. It affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016 Enterprise; Microsoft published the advisory on July 14, 2026. The EPSS score is 20.346%, but no public PoC exists and the flaw is not in CISA's KEV catalog at publication. Mitigations include applying Microsoft updates, rotating SharePoint machine keys, enabling AMSI, and restricting internet exposure.

Web discovery (articles for new exploits & KEV entries)Sep 7, 19:42 UTC · 9d agoVulnerability 3 sources CVE-2026-505221

Critical RCE Vulnerability Found in VMware vCenter Server — Patch Now!

The Hacker NewsMay 26, 04:57 UTC · May 26, 2021Vulnerability CVE-2021-21985 CVE-2021-21986 CVE-2021-21972+1 CVEs

Verizon DBIR: Vulnerability Exploits Overtake Credentials

Infosecurity MagazineMay 20, 08:40 UTC · May 20, 2026Vulnerability in the wild

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

The Hacker NewsSep 2, 04:43 UTC · Sep 2, 2025Vulnerability in the wildCVE-2025-54309 CVE-2025-31161 CVE-2024-4040

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

Microsoft's September 2026 Patch Tuesday ships 964 fixes including two exploited Windows zero-days (CVE-2026-85880, CVE-2026-81963) and a wormable DNS RCE.

Microsoft's September 2026 Patch Tuesday includes 964 Microsoft vulnerabilities requiring customer action, a record attributed to AI-assisted bug discovery, plus 174 third-party/open-source and 23 Chromium/Edge CVEs. Two zero-days are exploited in the wild: CVE-2026-85880, a Windows ALPC heap overflow enabling AppContainer sandbox escape and privilege escalation, and CVE-2026-81963, a Windows Update Stack escalation to SYSTEM. CVE-2026-69730, an unauthenticated Windows DNS RCE, is not yet exploited but Microsoft expects exploitation, and roughly 20 bugs could be wormable. Separately, SAP issued a critical CVSS 10.0 fix for the EPP component used in S/4HANA and NetWeaver.

CSO OnlineSep 9, 03:27 UTC · 8d agoVulnerability in the wildCVE-2026-85880 CVE-2026-81963 CVE-2026-69730+2 CVEs1

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

Kaspersky SecurelistMay 29, 07:00 UTC · May 29, 2026Vulnerability CVE-2025-55182 CVE-2023-4911 CVE-2021-4034+3 CVEs