60
Exploit kits attack vector – mid
60
60
Answering Log4Shell
60
60
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server
60
60
Amazon's Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation Bug
60
60
60
60
New Apache Log4j Update Released to Patch Newly Discovered Vulnerability
60
Microsoft Patch Tuesday, December 2021 Edition
60
A light December 2020 Patch Tuesday for a no-stress end of the year
60
60
U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog
CISA added two actively exploited PaperCut NG/MF pre-auth flaws to the KEV catalog; federal agencies must patch by September 14.
CISA added CVE-2026-81578 (CVSS 8.8, missing authentication for critical function) and CVE-2026-82078 (CVSS 9.4, unsafe reflection) in PaperCut NG/MF to its Known Exploited Vulnerabilities catalog. Huntress confirmed active pre-authentication RCE exploitation in two customer environments and reproduced the full chain against a clean PaperCut NG 25.0.11 server, chaining the auth bypass into unsafe Java class loading for SYSTEM-level execution. About 47% of roughly 2,500 tracked PaperCut installs still run version 23 or earlier with no patch available, and observed attacker activity was limited to system discovery commands.
72
SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth Bypass
60
60
60
60
60
60
60
60
60
60
60
Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262)
60
60
Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience
60
60
DARPA’s AI Cyber Challenge reveals winning models for automated vulnerability discovery and patching
60
60
60
Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization
60
60
60
60
Spring4Shell (CVE-2022
60
57