Collaborate Disseminate
The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process.
The post Critical Isolated-vm Vulnerability Leads to RCE on Host appeared first on SecurityWeek.
Continue reading Critical Isolated-vm Vulnerability Leads to RCE on Host
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.
The post Rust Supply Chain Attack Linked to North Korean Hackers appeared first on SecurityWeek.
Continue reading Rust Supply Chain Attack Linked to North Korean Hackers
Most of the fixes resolve code execution, privilege escalation, and information disclosure vulnerabilities.
The post Microsoft Rolls Out 22 Fresh Security Patches appeared first on SecurityWeek.
Continue reading Microsoft Rolls Out 22 Fresh Security Patches
The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware.
The post CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities appeared first on SecurityWeek.
Continue reading CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities
Operation CameraSwarm targeted Dahua cameras across multiple countries, focusing on Russian and CIS telecom netblocks.
The post Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia appeared first on SecurityWeek.
Continue reading Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia
The flaws could be exploited to execute arbitrary code, access sensitive information, and elevate privileges.
The post Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities appeared first on SecurityWeek.
Continue reading Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities
The critical-severity flaw allows attackers to send HTTP requests to internal endpoints and extract sensitive information.
The post MLflow Vulnerability Exploited for Cloud Credential Theft appeared first on SecurityWeek.
Continue reading MLflow Vulnerability Exploited for Cloud Credential Theft
The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks.
The post Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities appeared first on SecurityWeek.
Continue reading Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities
Remote, unauthenticated attackers could exploit the critical-severity flaw without user interaction.
The post Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler appeared first on SecurityWeek.
Continue reading Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler
CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.
The post Critical GitLab Flaw Exploited Shortly After Disclosure appeared first on SecurityWeek.
Continue reading Critical GitLab Flaw Exploited Shortly After Disclosure