FortiClient CORS flaw allows website-triggered RCE (CVE-2026-121529)
Fortinet says the CVSS 9.1 bug is not known exploited; fixes are 7.4.8 and 7.2.15, with no virtual patch.
1
Stories per day · 30 days
3 RSS
Relatedcors2forticlient2fortinet2ai1ai-credentials1aokigahara1developer-secrets1fortipam1huntress1infostealer1memory-corruption1privilege-escalation1ransomware1remote-access1remote-code-execution1security1teamviewer1trends1
8 stories, newest first · one card per story
Stories tagged #endpoint
TeamViewer before 15.83 lets a host attack the viewer (CVE-2026-111585)
A malicious host can crash the viewer and, on Windows, Remedio showed code execution that is not yet fully remote.
2
Aokigahara stealer takes developer keyrings and AI assistant sessions
Check Point says the Windows malware also steals browser, VPN, wallet, and password-manager data from one endpoint.
3
10 Endpoint Security Trends and Tips for 2027 | Huntress
Huntress discusses 10 endpoint security trends for 2027 focusing on AI risks, ransomware, and identity security.
Microsoft Enables Windows 11 Backup Setting by Default for Organizations
Microsoft enables Windows 11 26H2 settings backup by default when the policy is left unconfigured.
4
Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access
Zyxel disclosed an active exploitation of a stack-based buffer overflow in its GS1900 switch firmware (CVE-2026-7273), enabling OS command execution.
4
ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability
ZDI-26-654: Trend Micro Apex One incomplete cleanup flaw, CVE-2025-71414, enables local privilege escalation, rated CVSS 7.8.
macOS 26.6.2 (25G83)
Apple released macOS 26.6.2 (build 25G83), a point update delivering security patches for Macs on the macOS 26 line.