… Download Now Related Articles: Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026 Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own Recently leaked Windows zero-days now exploited in attacks Windows BitLocker zero-day gives access to protected drives, PoC released New Wind… …
… Cisco released security updates for the CVE-2026-20230 flaw on June 3, warning that exploitation could give attackers root privileges on the device. …
Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026 By Sergiu Gatlan May 18, 2026 01:33 AM The Pwn2Own Berlin 2026 hacking contest has concluded, with security researchers collecting $1,298,250 in rewards after exploiting 47 zero-day flaws. …
Google fixes one actively exploited Android zero-day, 124 flaws By Sergiu Gatlan June 2, 2026 07:10 AM Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. …
… Tracked as CVE-2026-10520 , the maximum-severity vulnerability stems from an OS command injection weakness and was patched by Ivanti on Tuesday with the release of Sentry versions R10.5.2, R10.6.2, and R10.7.1. …
… "Within under two hours of CVE-2026-48282 public details being released, KEVIntel captured in-the-wild exploitation within our global honeypot network," Dewhurst said . …
… 24 Targeting the education sector Mandiant released a report confirming that threat actors exploited the Oracle PeopleSoft CVE-2026-35273 vulnerability as a zero-day, primarily targeting organizations in the education sector. …
… Fortinet released security updates for these three critical-severity security flaws tracked as CVE-2026-39813 , CVE-2026-39808 , and CVE-2026-25089 on April 14. …
… This allowed the attackers to publish malicious package versions directly through legitimate releases, with the packages appearing legitimate. …
… CVE-2026-34908 is an improper access control flaw that can allow unauthorized changes to vulnerable systems CVE-2026-34909 is a path traversal vulnerability that can expose files on the underlying operating system CVE-2026-34910 is a command injection flaw that can be exploited to execute commands … …