Vulnerabilities & CVEs

Vulnerabilities & CVEs

SEPPMail Gateway Flaws Open Door to RCE, Mail Snooping [10.0 CVSS]

Forget incremental updates. SEPPMail Secure E-Mail Gateway just dropped a bomb, revealing a cascade of vulnerabilities that could let attackers not just peek, but take the keys to your entire email kingdom. We're talking remote code execution and unfettered access to every message flowing through your enterprise. This isn't just a patch; it's a seismic shift in how we need to think about email gateway security.

6 min read 4 days, 8 hours ago

Vulnerabilities & CVEs

Nx Console Hijacked: VS Code Developers Targeted

They say developers are paranoid. Turns out, they're right. A popular VS Code extension, Nx Console, just became the latest vector for a sophisticated credential stealer.

5 min read 4 days, 10 hours ago

Vulnerabilities & CVEs

Microsoft Exchange Zero-Day Exposed: What It Means for Your Inbox

A potent zero-day exploit is currently tearing through Microsoft Exchange servers, leaving businesses exposed. This isn't just an IT problem; it's a direct threat to your sensitive communications.

6 min read 4 days, 13 hours ago

Vulnerabilities & CVEs

Mini Shai-Hulud: Your Code is Now a Highway for Hackers

The digital equivalent of finding a Trojan horse in your code library just got a lot scarier. The Mini Shai-Hulud campaign is here, and it's not just about hitting tech giants; it's about every developer and every organization that relies on open-source software.

6 min read 4 days, 13 hours ago

Vulnerabilities & CVEs

GitHub Actions Hijacked: Your Code Now a Spyware Gateway

Forget the fancy code; the real news is that the tools you trust to build your software might now be the ones stealing your secrets. A clever hijacking of popular GitHub Actions means your CI/CD pipelines could be quietly coughing up credentials.

5 min read 4 days, 14 hours ago

Vulnerabilities & CVEs

Exchange 0-Day & npm Worm: Are Your Dependencies Truly Secure?

A barrage of critical vulnerabilities, including a zero-day on Microsoft Exchange and a rapidly spreading npm worm, underscores the precarious state of digital supply chains. Are you prepared for the next wave?

5 min read 5 days, 1 hour ago

Vulnerabilities & CVEs

Pwn2Own Berlin: 47 Zero-Days Uncovered, AI & Enterprise Systems Targeted

The recent Pwn2Own Berlin event wasn't just about bragging rights; it was a stark reminder of the vulnerabilities lurking in the enterprise AI stack. Almost $1.3 million was awarded for uncovering 47 zero-day flaws.

5 min read 5 days, 8 hours ago

Vulnerabilities & CVEs

Your Laptop Now Ships Software to Attackers

Forget just securing the code repository. A seismic shift is underway, transforming developer workstations into the hottest new target for sophisticated supply chain attacks.

6 min read 5 days, 8 hours ago

Vulnerabilities & CVEs

DirtyDecrypt Exploit: Root Access Now A Reality for Some Linux Users

The digital equivalent of finding a skeleton key for your Linux server just dropped. DirtyDecrypt, a kernel flaw, has been weaponized, allowing attackers to snatch root privileges.

7 min read 5 days, 11 hours ago

Vulnerabilities & CVEs

Windows MiniPlasma Zero-Day: SYSTEM Access for All?

Your Windows system is about to get interesting. A new zero-day, dubbed MiniPlasma, hands over SYSTEM access. And guess what? The proof-of-concept is already out.

6 min read 5 days, 13 hours ago

🕳️

Vulnerabilities & CVEs

Hackers Bag $1.3M in Pwn2Own Berlin Exploits [2026]

The dust has settled on Pwn2Own Berlin 2026, with white hat hackers walking away with a staggering $1.3 million. The competition showcased the relentless pursuit of zero-day vulnerabilities across a diverse tech landscape.

6 min read 5 days, 13 hours ago

Vulnerabilities & CVEs

Fortinet Fixes Critical RCE Flaws: What It Means for You

Fortinet's latest patches for FortiSandbox and FortiAuthenticator might sound like tech jargon, but for anyone whose business relies on these security products, it's a wake-up call.

5 min read 5 days, 13 hours ago