severity
Vulnerabilities rated CVSS 9.0 or higher, or Critical by the vendor.
Want to defend against threats like these? Get hands-on cybersecurity training at Skillmate
48 posts, newest first
WordPress security company Wordefence reported ongoing PHP2Shell-related requests across over 5 million protected sites, indicating...
Skillmate
A critical flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, allows remote attackers to run commands as root, affecting...
Skillmate
An attacker attempted to exploit a critical GitLab vulnerability on Alpine Linux's own server, even after a fix was released. The...
Skillmate
Hackers used a critical Cisco Catalyst SD-WAN flaw to plant custom malware called KeyDrift, which copies encryption keys for later use. The...
Skillmate
Cybersecurity researchers have disclosed an AI-assisted attack that exploited PHP2Shell vulnerabilities to breach 25 servers, including...
Skillmate
The insurance industry is closely monitoring the PHP2Shell vulnerabilities, which could lead to systemic cyber events and billions in...
Skillmate
Attackers are actively exploiting vulnerabilities in network devices, with PHP flaws known as 'PHP2Shell' targeting web management...
Skillmate
Google released Chrome 156, which includes patches for 52 security defects, including a critical memory corruption issue in FileSystem. The...
Skillmate
A critical 16-year-old flaw in EDK II, the open-source code used by most hardware makers to build UEFI firmware, allows attackers to run...
Skillmate
A China-linked threat actor exploited PHP2Shell vulnerabilities to gain root access to firewalls and deploy webshells, targeting two...
Skillmate
Pillar Security disclosed a critical vulnerability in Unsloth’s model loader, enabling attackers to execute arbitrary Python code through a...
Skillmate
Adobe has released security patches to address eight critical vulnerabilities in Campaign Classic, affecting versions 7.4.4 build 9402 and...
Skillmate
Four vulnerabilities were discovered in EPICS Base, control systems used in particle accelerators and fusion labs, by Cipher, an autonomous...
Skillmate
Threat actors have begun probing for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), tracked as CVE-2026-101767....
Skillmate
ShinyHunters, a cyber threat group, has exploited a series of three chained vulnerabilities in Oracle PeopleSoft since May, as reported by...
Skillmate
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers'...
Skillmate
CISA has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring immediate action from...
Skillmate
CISA warned federal agencies to patch two PHP vulnerabilities by Thursday, adding them to the Known Exploited Vulnerabilities (KEV) list....
Skillmate
HPE released patches for 72 vulnerabilities, including 33 critical-severity flaws, in its AOS-8 and AOS-10 wireless operating systems for...
Skillmate
Apple released updates for iOS, macOS, and other operating systems, addressing 286 vulnerabilities, including a critical zero-day flaw in...
Skillmate
Eight intermediate CA certificates from eMudhra were found to use weak private keys, potentially allowing attackers to issue trusted...
Skillmate
Ukrainian cybersecurity researchers have warned that hackers are compromising Dahua internet-connected cameras and video recorders,...
Skillmate
Researchers confirmed the exploitation of PHP2Shell vulnerabilities, generating 35 shells from two IP addresses on October 24. The...
Skillmate
A threat actor has infected 953 online stores, primarily running Magento, with loader code as part of a long-lasting campaign since July...
Skillmate
Microsoft has released emergency updates for its .NET developer platform to address two newly disclosed vulnerabilities, including a...
Skillmate
Two critical vulnerabilities in Wasmtime, a WebAssembly runtime, could allow malicious modules to escape their intended sandboxes,...
Skillmate
An out-of-bounds write vulnerability in Google’s Brotli decoder, tracked as CVE-2026-111497, has prompted security updates from Microsoft,...
Skillmate
OpenAI conducted a red-teaming campaign to test the security of its research environments and discovered a critical unauthenticated remote...
Skillmate
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client,...
Skillmate
Organizations face significant business impacts, including data exfiltration, financial loss, and operational disruption. The use of AI in...
Skillmate
The vulnerability can be exploited when an application sets session.serializehandler to phpbinary or phpserialize in its configuration and...
Skillmate
Threat actors have attempted to use PHP2Shell vulnerabilities to spread a Mirai botnet, but no successful compromise has been confirmed...
Skillmate
The critical-severity flaws include CVE-2026-65637, CVE-2026-65182, CVE-2026-68525, CVE-2026-58062, and CVE-2026-77185, affecting Apache...
Skillmate
Arista Networks released security updates to address a zero-day vulnerability in VeloCloud Orchestrator (VCO) On-Prem deployments, which...
Skillmate
Signal resolved a critical vulnerability in RingRTC, an open-source library used for voice and video calls, which allowed attackers to...
Skillmate
Splunk and SolarWinds this week issued security updates to address multiple vulnerabilities in their products, including code execution and...
Skillmate
Cisco announced patches for 34 security vulnerabilities across multiple products, including Expressway Series, IOS XR, Snort 3, and Unified...
Skillmate
Oracle released its October 2026 Critical Patch Update (CPU), addressing 1,295 vulnerabilities across various products. The vulnerability...
Skillmate
GitLab released critical updates on October 21 for a flaw that could allow unauthenticated users to run code on self-managed servers,...
Skillmate
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, first drew attention in August after an AI review, causing...
Skillmate
Hundreds of websites went offline due to critical PHP vulnerabilities that allowed for remote code execution. The maintainers of PHP...
Skillmate
Security researchers from Pwn.ai discovered a critical flaw in the Linux kernel’s networking stack, allowing attackers to escape KVM...
Skillmate
The PHP security team issued a warning for administrators to prepare for emergency security updates to address two critical...
Skillmate
The FBI and cyber agencies from the UK and Germany have reported that the SafePay ransomware gang has breached over 600 organizations since...
Skillmate
Researchers have released a proof-of-concept exploit for a critical path traversal vulnerability (CVE-2026-106173, CVSS score 9.4)...
Skillmate
A nation-state cyber espionage group, Armory Castle, exploited a zero-day vulnerability in BeyondTrust Remote Support, impacting a small...
Skillmate
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical vulnerabilities that...
Skillmate