Collaborate Disseminate
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
The post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.
Continue reading SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
Hackers impersonated the company’s personnel and contacted its employees to gain access to Astrana Health’s servers.
The post Astrana Health Data Breach Impacts Private, Confidential Information appeared first on SecurityWeek.
Continue reading Astrana Health Data Breach Impacts Private, Confidential Information
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
The post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek.
Continue reading Critical WordPress Vulnerability Exploited Immediately After Disclosure
The nine critical security defects could be exploited for arbitrary code execution and privilege escalation.
The post Adobe Patches Critical Flaws in Connect, AEM Forms appeared first on SecurityWeek.
Continue reading Adobe Patches Critical Flaws in Connect, AEM Forms
The browser update resolves several critical-severity memory safety and memory corruption flaws.
The post Chrome 154 Patches 108 Vulnerabilities appeared first on SecurityWeek.
Continue reading Chrome 154 Patches 108 Vulnerabilities
Remote attackers could trigger the critical-severity flaw to access privileged internal functionality.
The post Arista Urges Immediate Patching of Exploited VCO Zero-Day appeared first on SecurityWeek.
Continue reading Arista Urges Immediate Patching of Exploited VCO Zero-Day
Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution.
The post Critical F5 BIG-IP Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.
Continue reading Critical F5 BIG-IP Vulnerability Exploited as Zero-Day
The critical-severity flaw could allow unauthenticated attackers to upload and execute arbitrary scripts.
The post Check Point Patches Exploited Management Server Zero-Day appeared first on SecurityWeek.
Continue reading Check Point Patches Exploited Management Server Zero-Day
The attackers used a compromised BigCommerce application key held by Ribon to access customer data.
The post BigCommerce Data Stolen via Ribon Apps Hack appeared first on SecurityWeek.
Continue reading BigCommerce Data Stolen via Ribon Apps Hack
A Chinese threat actor has exploited the bug to exfiltrate sensitive information from nearly 1,000 ZyXEL switches.
The post Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers appeared first on SecurityWeek.
Continue reading Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers