Latest Newsroom publisher

MikroTik-routers via kritiek beveiligingslek op afstand over te nemen

Een kritieke kwetsbaarheid maakt het mogelijk voor ongeauthenticeerde aanvallers om MikroTik-routers op afstand over te nemen. Er is een firmware-update uitgebracht om het probleem te verhelpen. De kw ... Read more

Published Date: Sep 30, 2026 (2 days, 2 hours ago)

Vulnerabilities has been mentioned in this article.

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation in the wild. The vul ... Read more

Published Date: Sep 30, 2026 (2 days, 4 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

Apple Zero-Day Vulnerability Weaponized in Targeted Attacks

4 Min ReadSource: tetrisfun via ShutterstockApple released new versions of iOS and macOS to address a zero-day vulnerability that a threat actor is actively exploiting in targeted attacks.The out-of-b ... Read more

Published Date: Sep 29, 2026 (2 days, 10 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-86950 CVE-2025-55177 CVE-2025-43300

Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution

3 Min ReadSource: webguzs via Getty ImagesUnsloth has fixed a vulnerability in its Web user interface (UI) front end that exposed users to arbitrary code execution through malicious models.Pillar Secu ... Read more

Published Date: Sep 29, 2026 (1 day, 21 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-46432 CVE-2026-4944 CVE-2026-6859

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers, langua ... Read more

Published Date: Sep 29, 2026 (2 days ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-64508 CVE-2026-64507

Apple CoreGraphics Zero-Day: CVE-2026-86950

Apple has released  security updates to address a newly disclosed CoreGraphics vulnerability, CVE-2026-86950.The vulnerability is an out-of-bounds write that can potentially lead to arbitrary code exe ... Read more

Published Date: Sep 29, 2026 (2 days ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-86950

Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

Rob Wright,Senior News Director,Dark ReadingSeptember 29, 20264 Min ReadSource: JHVE via ShutterstockCitrix on Sept. 27 disclosed two critical NetScaler zero-day vulnerabilities after reports of explo ... Read more

Published Date: Sep 29, 2026 (2 days, 1 hour ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

Vulnerability in Quick.Cart software

Vulnerability in Quick.Cart software CVE ID CVE-2026-41875 Publication date 29 September 2026 Vendor OpenSolution Product Quick.Cart Vulnerable versions All through 6.7.0 Vulnerability type (CWE) Cros ... Read more

Published Date: Sep 29, 2026 (1 day, 22 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-41875

Vulnerability in MyPresta Google Merchant Center Feed software

Vulnerability in MyPresta Google Merchant Center Feed software CVE ID CVE-2026-85520 Publication date 29 September 2026 Vendor MyPresta Product Google Merchant Center Feed Vulnerable versions From 1.9 ... Read more

Published Date: Sep 29, 2026 (1 day, 19 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-85520

Onderzoekers melden grootschalig misbruik van kritieke Citrix-lekken

Aanvallers maken op grote schaal misbruik van twee kritieke Citrix-kwetsbaarheden, zo melden beveiligingsonderzoekers. Het Amerikaanse cyberagentschap CISA heeft federale overheidsinstanties opgedrage ... Read more

Published Date: Sep 29, 2026 (1 day, 20 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

Vulnerability in Ghostscript software

Vulnerability in Ghostscript software CVE ID CVE-2026-19547 Publication date 29 September 2026 Vendor Artifex Software Inc. Product Ghostscript Vulnerable versions All before 10.08.0 Vulnerability typ ... Read more

Published Date: Sep 29, 2026 (1 day, 19 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-19547

Vulnerability in Das U-Boot software

Vulnerability in Das U-Boot software CVE ID CVE-2026-15390 Publication date 29 September 2026 Vendor DENX Software Engineering Product Das U-Boot Vulnerable versions From 2009.08 through 2026.07 Vulne ... Read more

Published Date: Sep 29, 2026 (1 day, 13 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-15390

New THOR Detection Coverage for Citrix NetScaler CVE-2026-88771 and CVE-2026-88772

On September 27, 2026, Citrix published security bulletin CTX697096 covering eight vulnerabilities in NetScaler ADC and NetScaler Gateway. This post focuses on CVE-2026-88771, an unauthenticated comma ... Read more

Published Date: Sep 29, 2026 (1 day, 9 hours ago)

Vulnerabilities has been mentioned in this article.

Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation

Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. "It is true that this month a 24-year-old man from Amsterdam was arreste ... Read more

Published Date: Sep 29, 2026 (1 day, 9 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-35273

Apple dicht beveiligingslek ingezet bij aanvallen tegen iPhone-gebruikers

Apple heeft beveiligingsupdates uitgebracht voor een kwetsbaarheid die is ingezet bij aanvallen tegen iPhone-gebruikers. Via het 'out-of-bounds write' beveiligingslek (CVE-2026-86950) kan een aanvalle ... Read more

Published Date: Sep 29, 2026 (1 day, 8 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-86950

One Packet Can Crash OT Servers in Industrial Sectors

4 Min ReadSource: Elena Abrazhevich via ShutterstockA newly disclosed flaw in an open source database used in industrial and Internet of Things (IoT) environments could let unauthenticated attackers c ... Read more

Published Date: Sep 28, 2026 (1 day, 18 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-42542

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2 ... Read more

Published Date: Sep 28, 2026 (1 day, 18 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-86950 CVE-2026-20700

Four More Vulnerabilities Enter CISA KEV

CISA has added four vulnerabilities affecting WSO2, Adobe Commerce, Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) Catalog.Hacking & CrackingThe common factor ... Read more

Published Date: Sep 28, 2026 (1 day, 19 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-67279 CVE-2026-71362 CVE-2026-65660 CVE-2026-5430

Vulnerabilities in Dayforce Payroll software

Vulnerabilities in Dayforce Payroll software CVE ID CVE-2026-73640 Publication date 28 September 2026 Vendor Dayforce Product Payroll Vulnerable versions R2026.2.0 Vulnerability type (CWE) Improper ne ... Read more

Published Date: Sep 28, 2026 (1 day, 21 hours ago)

Vulnerabilities has been mentioned in this article.

⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was: forgotten assump ... Read more

Published Date: Sep 28, 2026 (1 day, 22 hours ago)

Vulnerabilities has been mentioned in this article.

Vulnerabilities in Kaon AR2140 routers

Vulnerabilities in Kaon AR2140 routers CVE ID CVE-2026-52748 Publication date 28 September 2026 Vendor Kaon Product AR2140 Vulnerable versions All through 4.2.17 Vulnerability type (CWE) Missing authe ... Read more

Published Date: Sep 28, 2026 (1 day, 20 hours ago)

Vulnerabilities has been mentioned in this article.

Microsoft SharePoint-servers aangevallen via recent beveiligingslek

Aanvallers maken actief misbruik van een kwetsbaarheid in Microsoft SharePoint waarvoor vorige maand updates verschenen, zo waarschuwt Microsoft. Via het beveiligingslek (CVE-2026-65660) is remote cod ... Read more

Published Date: Sep 28, 2026 (1 day, 22 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-65660

Vulnerabilities in F&F Filipowski mH-DEVELOPER devices

Vulnerabilities in F&F Filipowski mH-DEVELOPER devices CVE ID CVE-2026-82928 Publication date 28 September 2026 Vendor F&F Filipowski Product mH-DEVELOPER Vulnerable versions All before 3.0.30 Vulnera ... Read more

Published Date: Sep 28, 2026 (1 day, 23 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-82936 CVE-2026-82935 CVE-2026-82933 CVE-2026-82932 CVE-2026-82930 CVE-2026-82929 CVE-2026-82928

Google meldt grootschalige aanvallen van ShinyHunters op PeopleSoft-servers

De criminele groepering ShinyHunters voert weer op grote schaal aanvallen uit tegen Oracle PeopleSoft-servers, waarbij de aanvallers een manier hebben gevonden om Web Application Firewall (WAF) rules ... Read more

Published Date: Sep 28, 2026 (1 day, 23 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-35273

Patiëntomgevingen ziekenhuizen weer online na Citrix-kwetsbaarheden

De patiëntomgevingen van verschillende Nederlandse ziekenhuizen zijn weer online nadat die eerder wegens kwetsbaarheden in Citrix offline waren gehaald. Het gaat onder andere om het Frisius MC in Frie ... Read more

Published Date: Sep 28, 2026 (1 day, 22 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88772 CVE-2026-88771

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the act ... Read more

Published Date: Sep 28, 2026 (1 day, 22 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-3248

Citrix waarschuwt voor misbruikte kwetsbaarheden: 'Zo snel mogelijk updaten'

Citrix waarschuwt voor twee kritieke kwetsbaarheden in Citrix NetScaler ADC en Gateway waar aanvallers actief misbruik van maken. Patches zijn nu beschikbaar gesteld, maar het misbruik vond al voor he ... Read more

Published Date: Sep 28, 2026 (1 day, 16 hours ago)

Vulnerabilities has been mentioned in this article.

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following rep ... Read more

Published Date: Sep 28, 2026 (1 day, 12 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88778 CVE-2026-88772 CVE-2026-88771

Citrix NetScaler Zero-Days Exploited in the Wild: CISA Adds Them to KEV

Executive SummaryCitrix has confirmed that two NetScaler ADC and NetScaler Gateway zero-day vulnerabilities — CVE-2026-88771 and CVE-2026-88772 — are being exploited in the wild.Both are rated CVSS 9. ... Read more

Published Date: Sep 28, 2026 (1 day, 17 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-88778 CVE-2026-88777 CVE-2026-88776 CVE-2026-88775 CVE-2026-88774 CVE-2026-88773 CVE-2026-88772 CVE-2026-88771 CVE-2026-19490

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr s ... Read more

Published Date: Sep 27, 2026 (2 days, 9 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-19490 CVE-2026-8452

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. ... Read more

Published Date: Sep 26, 2026 (2 days, 18 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2023-20598

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involv ... Read more

Published Date: Sep 26, 2026 (3 days, 1 hour ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-35273

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) ca ... Read more

Published Date: Sep 26, 2026 (3 days, 3 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-86060 CVE-2026-67279 CVE-2026-65660

CVE-2026-87902: Critical Vulnerability in WordPress

vulnerability CVE-2026-87902, a new critical vulnerability in the WordPress core, is already being actively exploited in real-world attacks. Editorial Team September 25, 2026 A critical vulnerability ... Read more

Published Date: Sep 25, 2026 (3 days, 21 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-87902

Roundcube Webmail SQL Injection-lek misbruikt bij aanvallen

Een SQL Injection-kwetsbaarheid in Roundcube wordt misbruikt bij aanvallen. Dat laat het Canadese Centrum voor Cybersecurity weten. Roundcube is opensource-webmailsoftware en wordt door allerlei organ ... Read more

Published Date: Sep 25, 2026 (3 days, 22 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-48842

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS scor ... Read more

Published Date: Sep 25, 2026 (3 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-48842 CVE-2025-68461 CVE-2025-49113

NCSC meldt actief misbruik van kritiek WordPress-lek: 'Update nu'

Aanvallers maken actief misbruik van een kritieke path traversal-kwetsbaarheid in WordPress waardoor websites zijn over te nemen, zo meldt het Nationaal Cyber Security Centrum (NCSC). Er is een update ... Read more

Published Date: Sep 25, 2026 (4 days ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-87902

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (K ... Read more

Published Date: Sep 25, 2026 (4 days, 5 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-71362 CVE-2026-5430

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus's own ... Read more

Published Date: Sep 24, 2026 (4 days, 14 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-10184

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times before.That is the thread run ... Read more

Published Date: Sep 24, 2026 (4 days, 5 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2024-21412 CVE-2023-38831

The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint

BackgroundHuntress researchers recently came across a unique incident where, after gaining initial access via exploiting a known Samsung MagicINFO vulnerability and installing a rogue AnyDesk instance ... Read more

Published Date: Sep 24, 2026 (4 days, 8 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-4632 CVE-2024-7399

Check Point meldt actief misbruik van kritieke vpn-kwetsbaarheid

Cybersecuritybedrijf Check Point waarschuwt voor actief misbruik van een kritieke kwetsbaarheid in de vpn-producten die het biedt. Via het beveiligingslek (CVE-2026-85102) kan een ongeauthenticeerde a ... Read more

Published Date: Sep 24, 2026 (4 days, 7 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-93616 CVE-2026-85102

Adobe dicht kritieke kwetsbaarheden in Connect en AEM Forms

Adobe heeft beveiligingsupdates uitgebracht voor kritieke kwetsbaarheden in Adobe Connect en Adobe Experience Manager (AEM) Forms. Verschillende beveiligingslekken maken het mogelijk om willekeurige c ... Read more

Published Date: Sep 24, 2026 (4 days, 7 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-75745 CVE-2026-75682

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could all ... Read more

Published Date: Sep 24, 2026 (4 days, 8 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-87902

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chai ... Read more

Published Date: Sep 23, 2026 (4 days, 20 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-86060 CVE-2026-67279 CVE-2026-67276

Check Point waarschuwt voor Path Traversal kwetsbaarheid

Check Point waarschuwt voor een Path Traversal en File Upload kwetsbaarheid in de Check Point Management Server. Met behulp van deze kwetsbaarheid (CVE 2026 93616) kunnen aanvallers, zonder enige vorm ... Read more

Published Date: Sep 23, 2026 (4 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-93616

Vulnerability in WEBCON BPS software

Vulnerability in WEBCON BPS software CVE ID CVE-2026-92419 Publication date 23 September 2026 Vendor WEBCON Product WEBCON BPS Vulnerable versions From 2024.1.1.145 before 2025.2.1.177From 2026.1.1.1 ... Read more

Published Date: Sep 23, 2026 (4 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

A flaw in cPanel's CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and take "full control of the server," the company said on September 22. A second bug in the WP ... Read more

Published Date: Sep 23, 2026 (4 days, 22 hours ago)

Vulnerabilities has been mentioned in this article.

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September 22. The flaw, ... Read more

Published Date: Sep 23, 2026 (4 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.

CVE-2026-80521

Chrome 154 verhelpt in totaal 108 kwetsbaarheden

Google heeft een nieuwe Chrome versie beschikbaar gesteld waarin 108 kwetsbaarheden zijn verholpen. Van de 108 kwetsbaarheden worden 11 aangemerkt als "critical", 25 als "high", 47 als "medium" en 25 ... Read more

Published Date: Sep 23, 2026 (4 days, 23 hours ago)

Vulnerabilities has been mentioned in this article.