severity
Flaws confirmed exploited in the wild by CISA KEV or the vendor. Patch these first.
Want to defend against threats like these? Get hands-on cybersecurity training at Skillmate
65 posts, newest first
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, allowing attackers to remotely...
Skillmate
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Ivanti Connect Secure (ICS) vulnerabilities to its Known...
Skillmate
Threat actors have targeted servers with PHP2Shell vulnerabilities for over a week, successfully compromising a few Palo Alto Networks...
Skillmate
A high-severity vulnerability in TeamViewer, tracked as CVE-2026-111585 with a CVSS score of 8.8, could allow attackers to execute...
Skillmate
Drupal has issued a warning that threat actors are exploiting a critical security flaw in its Commerce Core component, affecting versions...
Skillmate
WordPress security company Wordefence reported ongoing PHP2Shell-related requests across over 5 million protected sites, indicating...
Skillmate
A critical flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, allows remote attackers to run commands as root, affecting...
Skillmate
An attacker attempted to exploit a critical GitLab vulnerability on Alpine Linux's own server, even after a fix was released. The...
Skillmate
Hackers used a critical Cisco Catalyst SD-WAN flaw to plant custom malware called KeyDrift, which copies encryption keys for later use. The...
Skillmate
A zero-day vulnerability in VMware ESX was exploited by a China-nexus threat actor known as Warp Panda, targeting the U.S. legal sector to...
Skillmate
Cybersecurity researchers have disclosed an AI-assisted attack that exploited PHP2Shell vulnerabilities to breach 25 servers, including...
Skillmate
The insurance industry is closely monitoring the PHP2Shell vulnerabilities, which could lead to systemic cyber events and billions in...
Skillmate
Attackers are actively exploiting vulnerabilities in network devices, with PHP flaws known as 'PHP2Shell' targeting web management...
Skillmate
Google released Chrome 156, which includes patches for 52 security defects, including a critical memory corruption issue in FileSystem. The...
Skillmate
A critical 16-year-old flaw in EDK II, the open-source code used by most hardware makers to build UEFI firmware, allows attackers to run...
Skillmate
A China-linked threat actor exploited PHP2Shell vulnerabilities to gain root access to firewalls and deploy webshells, targeting two...
Skillmate
Pillar Security disclosed a critical vulnerability in Unsloth’s model loader, enabling attackers to execute arbitrary Python code through a...
Skillmate
Adobe has released security patches to address eight critical vulnerabilities in Campaign Classic, affecting versions 7.4.4 build 9402 and...
Skillmate
Four vulnerabilities were discovered in EPICS Base, control systems used in particle accelerators and fusion labs, by Cipher, an autonomous...
Skillmate
Threat actors have begun probing for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), tracked as CVE-2026-101767....
Skillmate
ShinyHunters, a cyber threat group, has exploited a series of three chained vulnerabilities in Oracle PeopleSoft since May, as reported by...
Skillmate
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers'...
Skillmate
CISA has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring immediate action from...
Skillmate
The GoAhead embedded web server had a vulnerability that allowed revoked client certificates to pass through during mutual-TLS...
Skillmate
CISA warned federal agencies to patch two PHP vulnerabilities by Thursday, adding them to the Known Exploited Vulnerabilities (KEV) list....
Skillmate
HPE released patches for 72 vulnerabilities, including 33 critical-severity flaws, in its AOS-8 and AOS-10 wireless operating systems for...
Skillmate
Apple released updates for iOS, macOS, and other operating systems, addressing 286 vulnerabilities, including a critical zero-day flaw in...
Skillmate
Apple has released backported security patches for older iPhones and iPads to address a zero-day bug in CoreGraphics, which was exploited...
Skillmate
In September 2026, unidentified threat actors exploited undisclosed vulnerabilities in Citrix NetScaler ADC and Gateway, leading to urgent...
Skillmate
Researchers at Enclave discovered a vulnerability in Microsoft Authenticator on Android that allowed any app on the device to steal work...
Skillmate
Eight intermediate CA certificates from eMudhra were found to use weak private keys, potentially allowing attackers to issue trusted...
Skillmate
Ukrainian cybersecurity researchers have warned that hackers are compromising Dahua internet-connected cameras and video recorders,...
Skillmate
Researchers confirmed the exploitation of PHP2Shell vulnerabilities, generating 35 shells from two IP addresses on October 24. The...
Skillmate
A threat actor has infected 953 online stores, primarily running Magento, with loader code as part of a long-lasting campaign since July...
Skillmate
Microsoft has released emergency updates for its .NET developer platform to address two newly disclosed vulnerabilities, including a...
Skillmate
Two critical vulnerabilities in Wasmtime, a WebAssembly runtime, could allow malicious modules to escape their intended sandboxes,...
Skillmate
An out-of-bounds write vulnerability in Google’s Brotli decoder, tracked as CVE-2026-111497, has prompted security updates from Microsoft,...
Skillmate
OpenAI conducted a red-teaming campaign to test the security of its research environments and discovered a critical unauthenticated remote...
Skillmate
A new UEFI bootkit called BlackX was deployed in early 2026 to target diplomatic agencies in Central Asia, exploiting the Baton Drop...
Skillmate
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client,...
Skillmate
Diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan have been targeted by the BlackX UEFI bootkit, suspected to be...
Skillmate
Organizations face significant business impacts, including data exfiltration, financial loss, and operational disruption. The use of AI in...
Skillmate
The vulnerability can be exploited when an application sets session.serializehandler to phpbinary or phpserialize in its configuration and...
Skillmate
Threat actors have attempted to use PHP2Shell vulnerabilities to spread a Mirai botnet, but no successful compromise has been confirmed...
Skillmate
The critical-severity flaws include CVE-2026-65637, CVE-2026-65182, CVE-2026-68525, CVE-2026-58062, and CVE-2026-77185, affecting Apache...
Skillmate
Arista Networks released security updates to address a zero-day vulnerability in VeloCloud Orchestrator (VCO) On-Prem deployments, which...
Skillmate
Signal resolved a critical vulnerability in RingRTC, an open-source library used for voice and video calls, which allowed attackers to...
Skillmate
Splunk and SolarWinds this week issued security updates to address multiple vulnerabilities in their products, including code execution and...
Skillmate
Cisco announced patches for 34 security vulnerabilities across multiple products, including Expressway Series, IOS XR, Snort 3, and Unified...
Skillmate
Node.js released security updates on October 21 to fix 10 flaws, with the most serious being a remote code execution vulnerability in the...
Skillmate
Oracle released its October 2026 Critical Patch Update (CPU), addressing 1,295 vulnerabilities across various products. The vulnerability...
Skillmate
GitLab released critical updates on October 21 for a flaw that could allow unauthenticated users to run code on self-managed servers,...
Skillmate
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, first drew attention in August after an AI review, causing...
Skillmate
Hundreds of websites went offline due to critical PHP vulnerabilities that allowed for remote code execution. The maintainers of PHP...
Skillmate
Security researchers from Pwn.ai discovered a critical flaw in the Linux kernel’s networking stack, allowing attackers to escape KVM...
Skillmate
The PHP security team issued a warning for administrators to prepare for emergency security updates to address two critical...
Skillmate
The FBI and cyber agencies from the UK and Germany have reported that the SafePay ransomware gang has breached over 600 organizations since...
Skillmate
Researchers have released a proof-of-concept exploit for a critical path traversal vulnerability (CVE-2026-106173, CVSS score 9.4)...
Skillmate
Threat actors are exploiting a high-severity vulnerability in Palo Alto Networks' GlobalProtect portal, enabling unauthorized access to...
Skillmate
Security researcher Oren Yomtov tracked broken patches in webmail software, finding that incomplete fixes can turn into attack vectors. The...
Skillmate
A nation-state cyber espionage group, Armory Castle, exploited a zero-day vulnerability in BeyondTrust Remote Support, impacting a small...
Skillmate
Threat actors used a genuine, signed copy of Siemens Software Center to distribute malicious DLL files, infecting Windows PCs via ClickFix...
Skillmate
Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, collectively known as Plex2Shell, to deploy...
Skillmate
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical vulnerabilities that...
Skillmate