… Cybersecurity and Infrastructure Security Agency CISA added the flaw to its Known Exploited Vulnerabilities KEV Catalog and ordered Federal Civilian Executive Branch FCEB agencies to patch their systems by midnight on Wednesday, May 27, as mandated by Binding Operational Directive BOD 22-01 . …
… "Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data." Internet intelligence platform Shodan now tracks over 1,592 Oracle WebLogic servers exposed online and vulnerable to CVE-2024-21182 exploit… …
… Cybersecurity and Infrastructure Security Agency CISA added the CVE-2026-20182 flaw to its Known Exploited Vulnerabilities Catalog on May 14 and ordered federal agencies to secure affected devices within three days, by May 17. …
… Cybersecurity and Infrastructure Security Agency CISA also added a critical command injection flaw CVE-2010-5330 in Ubiquiti AirOS to its catalog of actively exploited vulnerabilities and ordered federal agencies to secure their devices within three weeks. …
… Cybersecurity and Infrastructure Security Agency CISA also added CVE-2026-34926 to its list of actively exploited vulnerabilities and ordered federal agencies to patch their devices by June 4. …
Google fixes one actively exploited Android zero-day, 124 flaws By Sergiu Gatlan June 2, 2026 07:10 AM Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. …
… Faster Alerts Prevent Costly Breaches Time is a critical currency when it comes to cybersecurity. New vulnerabilities increased by 67% between 2023 and 2025, while exploited vulnerabilities rose by around 30% over the same period. …
… Cybersecurity and Infrastructure Security Agency CISA also ordered government agencies to secure their Windows systems against these two Microsoft Defender zero-day vulnerabilities, warning that they're actively exploited in the wild. …
… The Cybersecurity and Infrastructure Security Agency CISA added Copy Fail to its list of flaws exploited in attacks on May 1 and ordered federal agencies to secure their Linux devices within two weeks, by May 15. …
… Over the weekend, security researchers released PoC exploits targeting another recently patched Linux LPE tracked as DirtyDecrypt and DirtyCBC , which belongs to the same vulnerability class as several other root-escalation flaws, including Dirty Frag , Fragnesia , and Copy Fail . …