…Unauthenticated remote attackers can exploit this security flaw (tracked as CVE-2026-50751 ) to bypass authentication and establish a remote access VPN connection on targeted Mobile Access/SSL VPNs, Remote Access VPNs…
Charter confirms data breach after ShinyHunters extortion threat By Lawrence Abrams May 26, 2026 03:46 PM U.S. telecommunications giant Charter Communications has confirmed it suffered a data breach after the…
…Tracked as CVE-2026-48907 , this vulnerability can be exploited by threat actors without privileges to achieve code execution via low-complexity attacks targeting Joomla deployments that use the JCE WYSIWYG editor…
Grafana says stolen GitHub token let hackers steal codebase By Bill Toulas May 18, 2026 09:46 AM Grafana Labs disclosed that hackers have downloaded its source code after breaching its GitHub…
Hackers exploit FortiClient EMS flaw to push infostealer malware By Bill Toulas May 28, 2026 01:25 PM Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management…
…A fix for CVE-2026-45185 was released in Exim version 4.99.3 . AI-assisted exploit build XBOW reports that creating the proof-of-concept (PoC) exploit was a seven-day…
…These CVE-2026-0300 zero-day attacks are part of a broader trend in which threat groups are targeting edge network devices (e.g., firewalls , hypervisors , routers , and VPN software ), which often…
Instagram users locked out after Meta AI abused to steal accounts By Bill Toulas June 2, 2026 11:47 AM Multiple Instagram users had their accounts hijacked after attackers convinced Meta’s…
…New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026 CISA orders feds to patch Windows flaw exploited…
Max severity Cisco Secure Workload flaw gives Site Admin privileges By Sergiu Gatlan May 21, 2026 09:58 AM Cisco has released security updates to address a maximum-severity Secure Workload vulnerability…