PolyShell flaw exposes Magento and Adobe Commerce to file upload attacksSecurity Affairs·Mar 21, 10:09 UTC · Mar 21, 2026Vulnerability in the wild60
PolyShell: unrestricted file upload in Magento and Adobe CommerceSansec (Magento / e-commerce security)·May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild60
A patched Windows attack surface is still exploitableKaspersky Securelist·Mar 14, 10:00 UTC · Mar 14, 2024Vulnerability in the wildCVE-2022-22047CVE-2022-37989CVE-2022-29104+3 CVEs60
Researchers Find ChatGPT Vulnerabilities That Let Attackers Trick AI Into Leaking DataThe Hacker News·Apr 16, 15:50 UTC · Apr 16, 2026VulnerabilityCVE-2025-59145160
Microsoft December 2021 Patch Tuesday fixes an actively exploited zeroSecurity Affairs·Dec 15, 15:08 UTC · Dec 15, 2021Vulnerability in the wildCVE-2021-43890CVE-2021-43240CVE-2021-41333+54 CVEs60
Flaws in Control Web Panel potentially expose Linux Servers to hackSecurity Affairs·Jan 22, 16:29 UTC · Jan 22, 2022VulnerabilityCVE-2021-45467CVE-2021-4546660
WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NASSecurity Affairs·Nov 26, 21:19 UTC · Nov 26, 2020VulnerabilityCVE-2018-18472CVE-2018-1847160
Invicti API Security uncovers hidden and undocumented APIsHelp Net Security·Jul 17, 00:00 UTC · Jul 17, 2024Vulnerability55
Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account TakeoverThe Hacker News·Mar 26, 06:26 UTC · Mar 26, 2026Vulnerability in the wild60
Untrusted repositories turn Claude code into an attack vectorSecurity Affairs·Feb 25, 21:39 UTC · Feb 25, 2026VulnerabilityCVE-2025-59536CVE-2026-2185260
Akto provides security assessments for GenAI modelsHelp Net Security·Feb 14, 00:00 UTC · Feb 14, 2024Vulnerability55
Preventing data leakage in low-node/no-code environmentsHelp Net Security·Dec 10, 00:00 UTC · Dec 10, 2024Vulnerability55
Upwind adds real-time AI security and posture management to its CNAPPHelp Net Security·Dec 2, 00:00 UTC · Dec 2, 2025Vulnerability55
AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes beginHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability55
Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilitiesCisco Talos·Jul 15, 14:52 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-56155CVE-2026-56164CVE-2026-50370+89 CVEs60
Most critical vulnerabilities aren't worth your attentionHelp Net Security·Apr 28, 00:00 UTC · Apr 28, 2025Vulnerability55
Flaw in AI Plugin Exposes 50,000 WordPress Sites to Remote AttackInfosecurity Magazine·Jan 9, 16:45 UTC · Jan 9, 2024VulnerabilityCVE-2023-5140960
Critical Bugs in Control Web Panel Expose Linux Servers to RCE AttacksThe Hacker News·Jan 22, 07:25 UTC · Jan 22, 2022VulnerabilityCVE-2021-45467CVE-2021-4546660
Amazon FSx for NetApp ONTAP brings data access and management capabilities to AWS cloudHelp Net Security·Apr 20, 08:45 UTC · Apr 20, 2026Vulnerability55
Cisco fixed a critical flaw in Cisco APIC for Nexus 9000 series switchesSecurity Affairs·Aug 26, 21:45 UTC · Aug 26, 2021VulnerabilityCVE-2021-157760
Containers on fire: from container escapes to supply chain attacksKaspersky Securelist·Jun 1, 10:00 UTC · Jun 1, 2026Vulnerability in the wildCVE-2019-5736CVE-2022-0492CVE-2024-21626160
CyCognito expands automated testing capabilitiesHelp Net Security·Oct 18, 00:00 UTC · Oct 18, 2024Vulnerability55
Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverageCisco Talos·Oct 9, 18:38 UTC · Oct 9, 2018VulnerabilityCVE-2018-8491CVE-2018-8460CVE-2018-8509+26 CVEs60
XM Cyber advances AI security with enhanced exposure and attack path visibilityHelp Net Security·Mar 25, 09:46 UTC · Mar 25, 2026Vulnerability55
Cisco fixed critical ISE flaws allowing RootSecurity Affairs·Jun 26, 12:25 UTC · Jun 26, 2025VulnerabilityCVE-2025-20281CVE-2025-2028260
StackHawk empowers security teams to expand their API testing coverageHelp Net Security·Aug 20, 00:00 UTC · Aug 20, 2025Vulnerability55
OpenClaw Integrates VirusTotal Scanning to Detect Malicious ClawHub SkillsThe Hacker News·Feb 9, 07:27 UTC · Feb 9, 2026Vulnerability55
FamousSparrow targets Azerbaijani energy sector in multiSecurity Affairs·May 14, 08:17 UTC · May 14, 2026Vulnerability55
Critical Grist-Core Vulnerability Allows RCE Attacks via Spreadsheet FormulasThe Hacker News·Jan 27, 14:07 UTC · Jan 27, 2026VulnerabilityCVE-2026-24002CVE-2025-6866860
VMware fixed critical VM Escape bug demonstrated at Geekpwn hacking contestSecurity Affairs·Dec 14, 07:57 UTC · Dec 14, 2022VulnerabilityCVE-2022-31705CVE-2022-31702CVE-2022-3170360
The Impact of Robotic Process Automation (RPA) on Identity and Access ManagementThe Hacker News·Dec 11, 11:30 UTC · Dec 11, 2025Vulnerability55
Largest Patch Tuesday in 3 months includes 5 critical vulnerabilitiesCisco Talos·Jul 9, 18:10 UTC · Jul 9, 2024Vulnerability in the wildCVE-2024-38023CVE-2024-38060CVE-2024-38074+7 CVEs60
Critical RCE Bug Reported in dotCMS Content Management SoftwareThe Hacker News·May 4, 12:05 UTC · May 4, 2022VulnerabilityCVE-2022-2635260
CISA Flags Actively Exploited Gogs Vulnerability With No PatchInfosecurity Magazine·Jan 13, 16:45 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-8110CVE-2024-5594760
FB fixed a WhatsApp bug that allowed hackers to access local file systemSecurity Affairs·Feb 4, 20:51 UTC · Feb 4, 2020VulnerabilityCVE-2019-1842660
Major Vulnerabilities Patched in SonicWall, Palo Alto Expedition, and Aviatrix ControllersThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2025Vulnerability in the wildCVE-2025-0103CVE-2025-0104CVE-2025-0105+5 CVEs60
Only one critical vulnerability included in May’s Microsoft Patch Tuesday; One other zeroCisco Talos·May 14, 17:57 UTC · May 14, 2024Vulnerability in the wildCVE-2024-30044CVE-2024-29997CVE-2024-29998+9 CVEs60