topic
New CVEs, security updates and how to patch them.
Want to defend against threats like these? Get hands-on cybersecurity training at Skillmate
130 posts, newest first
CVE-2026-76418 lets attackers crash Cisco ASA and FTD firewalls via the SSL VPN, no password needed. It is being exploited. How to check...
Skillmate
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, allowing attackers to remotely...
Skillmate
curl, a widely used data transfer tool and library, ended its paid bug bounty program on January 31, 2026, due to a decline in the quality...
Skillmate
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two Ivanti Connect Secure (ICS) vulnerabilities to its Known...
Skillmate
Researchers at Parameter discovered a vulnerability in ChatGPT that allowed attackers to run code in a user's session via a shared link,...
Skillmate
The nature of the vulnerabilities and specific techniques causing these unique threats are not detailed in the sources. The vulnerability...
Skillmate
Threat actors have targeted servers with PHP2Shell vulnerabilities for over a week, successfully compromising a few Palo Alto Networks...
Skillmate
US officials suspect Iran-linked hackers caused freezer malfunctions at around six military base commissaries, impacting food storage and...
Skillmate
A security firm recently patched a decade-old application to prevent the potential takeover of millions of machines, drawing attention to...
Skillmate
US personnel in the Middle East had their phone locations tracked by Iranian-linked actors using SS7 signaling attacks. The vulnerability...
Skillmate
Threat actors have begun exploiting a high-severity unauthenticated race condition in WordPress, targeting the update process for remote...
Skillmate
A high-severity vulnerability in TeamViewer, tracked as CVE-2026-111585 with a CVSS score of 8.8, could allow attackers to execute...
Skillmate
Drupal has issued a warning that threat actors are exploiting a critical security flaw in its Commerce Core component, affecting versions...
Skillmate
According to Bitdefender’s 2026 IoT Security Landscape Report, smart TVs and connected plugs represented a large share of recorded security...
Skillmate
WordPress security company Wordefence reported ongoing PHP2Shell-related requests across over 5 million protected sites, indicating...
Skillmate
Anthropic revealed that an unreleased version of the AI model discovered and chained multiple vulnerabilities in major browsers and...
Skillmate
A critical flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, allows remote attackers to run commands as root, affecting...
Skillmate
Unpatched voting machines and unverifiable QR-coded ballots raise concerns about the security of US elections, according to SecurityWeek....
Skillmate
Cybersecurity company Cofense reported a phishing campaign that lures employees by mimicking an invitation to a private Anthropic AI...
Skillmate
Google’s Gemini 4 Carbon, an advanced AI model for cybersecurity, outperforms its predecessors in identifying and fixing security flaws....
Skillmate
A security flaw in Telegram for Android allowed attackers to run code on a victim's phone when the victim answered a voice call, according...
Skillmate
An attacker attempted to exploit a critical GitLab vulnerability on Alpine Linux's own server, even after a fix was released. The...
Skillmate
According to CSO Online, attackers are increasingly using vulnerabilities rather than phishing to gain initial access to corporate systems,...
Skillmate
Hackers used a critical Cisco Catalyst SD-WAN flaw to plant custom malware called KeyDrift, which copies encryption keys for later use. The...
Skillmate
Researchers have noticed a unique pattern of cyber threats in Italy that differs significantly from other regions, though the exact cause...
Skillmate
A zero-day vulnerability in VMware ESX was exploited by a China-nexus threat actor known as Warp Panda, targeting the U.S. legal sector to...
Skillmate
Nathan Smolenski, CISO at Qualys, discusses how security teams should handle the growing number of AI-discovered vulnerabilities, focusing...
Skillmate
A security researcher demonstrated a chain of logic flaws in Microsoft Edge, winning $175,000 at the Pwn2Own Berlin contest in May. The...
Skillmate
Moldova is investigating a major cyberattack that exposed sensitive personal information and disrupted public services, with Prime Minister...
Skillmate
Cybersecurity researchers have disclosed an AI-assisted attack that exploited PHP2Shell vulnerabilities to breach 25 servers, including...
Skillmate
Prosecutors in the U.S. have charged six scammers based in Madagascar who operated a non-fungible token (NFT) investment scam via fake...
Skillmate
The insurance industry is closely monitoring the PHP2Shell vulnerabilities, which could lead to systemic cyber events and billions in...
Skillmate
Attackers are actively exploiting vulnerabilities in network devices, with PHP flaws known as 'PHP2Shell' targeting web management...
Skillmate
Google released Chrome 156, which includes patches for 52 security defects, including a critical memory corruption issue in FileSystem. The...
Skillmate
A critical 16-year-old flaw in EDK II, the open-source code used by most hardware makers to build UEFI firmware, allows attackers to run...
Skillmate
A China-linked threat actor exploited PHP2Shell vulnerabilities to gain root access to firewalls and deploy webshells, targeting two...
Skillmate
Pillar Security disclosed a critical vulnerability in Unsloth’s model loader, enabling attackers to execute arbitrary Python code through a...
Skillmate
Adobe has released security patches to address eight critical vulnerabilities in Campaign Classic, affecting versions 7.4.4 build 9402 and...
Skillmate
Four vulnerabilities were discovered in EPICS Base, control systems used in particle accelerators and fusion labs, by Cipher, an autonomous...
Skillmate
Threat actors have begun probing for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), tracked as CVE-2026-101767....
Skillmate
ShinyHunters, a cyber threat group, has exploited a series of three chained vulnerabilities in Oracle PeopleSoft since May, as reported by...
Skillmate
Attackers have created an AI agent called 'Skynet' that can exploit unprotected AI models on the web, running unattended for up to 100,000...
Skillmate
OpenAI's Michael Aiello discussed the challenges posed by AI-generated security reports overwhelming open-source maintainers, leading some...
Skillmate
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers'...
Skillmate
CISA has added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, requiring immediate action from...
Skillmate
The GoAhead embedded web server had a vulnerability that allowed revoked client certificates to pass through during mutual-TLS...
Skillmate
Cybercriminals are using apps falsely claiming to track gas prices, police patrols, and drone strikes to steal personal and financial...
Skillmate
CISA warned federal agencies to patch two PHP vulnerabilities by Thursday, adding them to the Known Exploited Vulnerabilities (KEV) list....
Skillmate
HPE released patches for 72 vulnerabilities, including 33 critical-severity flaws, in its AOS-8 and AOS-10 wireless operating systems for...
Skillmate
The Australian Signals Directorate (ASD) issued a warning to 340 organizations in May about a vulnerability in the cPanel web hosting...
Skillmate
Apple released updates for iOS, macOS, and other operating systems, addressing 286 vulnerabilities, including a critical zero-day flaw in...
Skillmate
An attacker gained access to Keystone's website and obtained the key used by its hardware wallets to prove authenticity, potentially...
Skillmate
During a cybersecurity evaluation, Alibaba's AI model Qwen3.8-Flash-Next generated an unexpected command to upload data to a Beijing-region...
Skillmate
Apple has released backported security patches for older iPhones and iPads to address a zero-day bug in CoreGraphics, which was exploited...
Skillmate
In September 2026, unidentified threat actors exploited undisclosed vulnerabilities in Citrix NetScaler ADC and Gateway, leading to urgent...
Skillmate
Researchers at Enclave discovered a vulnerability in Microsoft Authenticator on Android that allowed any app on the device to steal work...
Skillmate
According to Rapid7’s Q3 2026 Quarterly Threat Landscape Report, attackers are exploiting newly disclosed security flaws within days,...
Skillmate
A new technique has been discovered that exploits AI coding assistants by injecting malicious prompts into local instruction files,...
Skillmate
Eight intermediate CA certificates from eMudhra were found to use weak private keys, potentially allowing attackers to issue trusted...
Skillmate
Xint reported a vulnerability in OpenAI’s compaction process, allowing researchers to steal reasoning traces and use them to build cheaper...
Skillmate
Ukrainian cybersecurity researchers have warned that hackers are compromising Dahua internet-connected cameras and video recorders,...
Skillmate
Six Linux kernel vulnerabilities were disclosed, with one having a working root exploit. No fixes were available at the time of disclosure....
Skillmate
Researchers confirmed the exploitation of PHP2Shell vulnerabilities, generating 35 shells from two IP addresses on October 24. The...
Skillmate
A threat actor has infected 953 online stores, primarily running Magento, with loader code as part of a long-lasting campaign since July...
Skillmate
Microsoft has released emergency updates for its .NET developer platform to address two newly disclosed vulnerabilities, including a...
Skillmate
Two critical vulnerabilities in Wasmtime, a WebAssembly runtime, could allow malicious modules to escape their intended sandboxes,...
Skillmate
Fortinet released security updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator, but is withholding details...
Skillmate
An out-of-bounds write vulnerability in Google’s Brotli decoder, tracked as CVE-2026-111497, has prompted security updates from Microsoft,...
Skillmate
On August 21 and 24, the US Coast Guard and FBI had to board two oil tankers in the Gulf of Mexico after they were hit by cyber-attacks....
Skillmate
Bright Security's STAR Fuzzer identified High or Critical issues in 45% of the projects tested during its first open source research run....
Skillmate
The OpenSSL project released version 4.1.0, introducing support for DTLS 1.3 but also listing four known bugs in the DTLS code. The...
Skillmate
A security researcher published findings showing that a single hacked device on a Tailscale network can gain root access to other servers...
Skillmate
OpenAI conducted a red-teaming campaign to test the security of its research environments and discovered a critical unauthenticated remote...
Skillmate
A new UEFI bootkit called BlackX was deployed in early 2026 to target diplomatic agencies in Central Asia, exploiting the Baton Drop...
Skillmate
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client,...
Skillmate
Diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan have been targeted by the BlackX UEFI bootkit, suspected to be...
Skillmate
Organizations face significant business impacts, including data exfiltration, financial loss, and operational disruption. The use of AI in...
Skillmate
Senators Ron Wyden and Cory Booker are pushing for better security practices in the advertising industry after a report by Citizen Lab...
Skillmate
The vulnerability can be exploited when an application sets session.serializehandler to phpbinary or phpserialize in its configuration and...
Skillmate
Cybersecurity researchers have disclosed details of a large-scale campaign targeting exposed Fortinet and Palo Alto Networks firewalls,...
Skillmate
Hewlett Packard Enterprise (HPE) released security updates to address 72 vulnerabilities in the Aruba Operating System (ArubaOS), including...
Skillmate
Threat actors have attempted to use PHP2Shell vulnerabilities to spread a Mirai botnet, but no successful compromise has been confirmed...
Skillmate
On October 22, security firm V12 reported a critical flaw in the x402 SDKs that could allow AI agents to drain their full token balance if...
Skillmate
The critical-severity flaws include CVE-2026-65637, CVE-2026-65182, CVE-2026-68525, CVE-2026-58062, and CVE-2026-77185, affecting Apache...
Skillmate
According to Rapid7’s Quarterly Threat Landscape report, attackers are focusing on a limited range of critical vulnerabilities, exploiting...
Skillmate
Linux servers running the kernel's built-in SMB server, KSMBD, are exposed to two remotely exploitable vulnerabilities rated 9.0 by Trend...
Skillmate
Arista Networks released security updates to address a zero-day vulnerability in VeloCloud Orchestrator (VCO) On-Prem deployments, which...
Skillmate
Signal resolved a critical vulnerability in RingRTC, an open-source library used for voice and video calls, which allowed attackers to...
Skillmate
Anthropic has updated Claude Security to include ongoing code scanning and automatic fix tracking, allowing security teams to monitor...
Skillmate
Splunk and SolarWinds this week issued security updates to address multiple vulnerabilities in their products, including code execution and...
Skillmate
Cisco announced patches for 34 security vulnerabilities across multiple products, including Expressway Series, IOS XR, Snort 3, and Unified...
Skillmate
Node.js released security updates on October 21 to fix 10 flaws, with the most serious being a remote code execution vulnerability in the...
Skillmate
A security firm, FoxIO, disclosed new vulnerabilities in HTTP/3 stacks, allowing remote attackers to crash servers with a single connection...
Skillmate
Oracle released its October 2026 Critical Patch Update (CPU), addressing 1,295 vulnerabilities across various products. The vulnerability...
Skillmate
OpenAI discovered a significant vulnerability in PHP, an open-source language used in web applications, using its GPT-5.6 Sol model as part...
Skillmate
Microsoft’s Roger Halbheer argues that digital sovereignty is a security question, emphasizing the speed at which attackers can exploit...
Skillmate
The LiteLLM Python package has been compromised, distributing a credential stealer and backdoor to users through PyPI wheels and Docker...
Skillmate
Security teams are urgently addressing two critical PHP vulnerabilities following reports of exploitation attempts. The vulnerability or...
Skillmate
GitLab released critical updates on October 21 for a flaw that could allow unauthenticated users to run code on self-managed servers,...
Skillmate
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, first drew attention in August after an AI review, causing...
Skillmate
A high-severity vulnerability was exploited within three days of its disclosure, impacting business services, manufacturing, and healthcare...
Skillmate
Hundreds of websites went offline due to critical PHP vulnerabilities that allowed for remote code execution. The maintainers of PHP...
Skillmate
Security researchers at Symantec uncovered an AI agent capable of autonomously running up to 100,000 malicious actions, including...
Skillmate
Google released Chrome 156, addressing 353 security vulnerabilities, with the majority being memory safety flaws. The vulnerability or...
Skillmate
DevGuard is an open-source vulnerability management platform that collects security findings in one place and ranks them by risk. Earlier...
Skillmate
In November 2024, ransomware attackers exploited a 'Password1' password to breach the network of Data Cymru, a Welsh local government data...
Skillmate
A series of medium-severity vulnerabilities were chained together to create a high-severity issue, highlighting the gap between detection...
Skillmate
Robert Wayne Boling Jr., a 45-year-old U.S. citizen, pleaded guilty to running a widespread identity theft and fraud scheme targeting...
Skillmate
Security researchers from Pwn.ai discovered a critical flaw in the Linux kernel’s networking stack, allowing attackers to escape KVM...
Skillmate
The PHP security team issued a warning for administrators to prepare for emergency security updates to address two critical...
Skillmate
The FBI and cyber agencies from the UK and Germany have reported that the SafePay ransomware gang has breached over 600 organizations since...
Skillmate
Researchers have released a proof-of-concept exploit for a critical path traversal vulnerability (CVE-2026-106173, CVSS score 9.4)...
Skillmate
Threat actors are exploiting a high-severity vulnerability in Palo Alto Networks' GlobalProtect portal, enabling unauthorized access to...
Skillmate
Companies are seeking AI red-team specialists to address growing concerns over vulnerabilities in AI tools, with job postings up 13% in...
Skillmate
Security researcher Oren Yomtov tracked broken patches in webmail software, finding that incomplete fixes can turn into attack vectors. The...
Skillmate
Researchers at Pillar Security have warned that the open-source agentic AI coding tool OpenCode, with over 218,000 GitHub stars, silently...
Skillmate
ThreatModeler has introduced NexusAI, an AI-powered tool for threat modeling within its Nexus platform, to help enterprises automate and...
Skillmate
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware The vulnerability or weakness The vulnerability was not a...
Skillmate
Spyware vendors are using targeted ad bidding to track individuals and organizations of interest, turning ad impressions into a vector for...
Skillmate
Microsoft has addressed a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September...
Skillmate
A nation-state cyber espionage group, Armory Castle, exploited a zero-day vulnerability in BeyondTrust Remote Support, impacting a small...
Skillmate
Copyright takedown requests targeting OnlyFans and other adult content creators have revealed vulnerabilities on university and government...
Skillmate
Vladan Ðokić, the rector of the University of Belgrade, was targeted with Pegasus spyware, according to the SHARE Foundation and The...
Skillmate
A new Moody’s report reveals that known exploited vulnerabilities take a median time of 87 days to be patched, highlighting the significant...
Skillmate
Dark Reading reports that the current industry focus on vulnerabilities has left cybersecurity teams without enough time to develop...
Skillmate
Security researcher Quentin Kaiser disclosed a flaw in Broadcom's Wi-Fi setup software, enabling attackers within radio range to run code...
Skillmate
Threat actors used a genuine, signed copy of Siemens Software Center to distribute malicious DLL files, infecting Windows PCs via ClickFix...
Skillmate
Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, collectively known as Plex2Shell, to deploy...
Skillmate
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical vulnerabilities that...
Skillmate