Collaborate Disseminate
The bugs could lead to authentication bypass, shell command execution, and memory corruption.
The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.
Continue reading Fortra Patches Critical Vulnerabilities in BoKS
Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government entities in the US and abroad.
The post In Rare Move, Alleged Iranian State Hacker Extradited to US appeared first on … Continue reading In Rare Move, Alleged Iranian State Hacker Extradited to US
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek.
Continue reading Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek.
Continue reading Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action
Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.
The post Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure appeared first on SecurityWeek.
Continue reading Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure
The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.
The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek.
Continue reading Zammad Zero-Days Exploited in AI-Powered DIVD Hack
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek.
Continue reading 500,000 Active Credentials Left Exposed on GitHub
The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges.
The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWeek.
Continue reading Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability
WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS.
The post WatchGuard Patches Critical Fireware OS Code Injection Vulnerability appeared first on SecurityWeek.
Continue reading WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox.
The post Chrome, Firefox Updates Patch Over 100 Vulnerabilities appeared first on SecurityWeek.
Continue reading Chrome, Firefox Updates Patch Over 100 Vulnerabilities