Zoom warns of critical account takeover vulnerability
…At the time of disclosure, there are no indications that any of the vulnerabilities that Zoom fixed are being exploited in attacks. Test every layer before attackers do Security teams log 54…
Search
Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges
Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges By Lawrence Abrams June 9, 2026 07:11 PM A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just…
Critical Everest Forms Pro flaw exploited to take over WordPress sites
…Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. The security issue affects versions 1…
KnowledgeDeliver flaw exploited as a zero-day to install web shells
…The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger…
You Don't Have to Run an Exploit to Know If You're Vulnerable
Many vulnerabilities cannot be safely validated with live exploits, either because no exploit exists or the affected systems are too critical to test. Picus explains how TTP chaining helps organizations determine exploitability…
Google patches new Chrome zero-day flaw exploited in the wild
Google patches new Chrome zero-day flaw exploited in the wild By Sergiu Gatlan June 9, 2026 02:56 AM Google has released emergency updates to patch another Chrome zero-day vulnerability…
18-year-old NGINX vulnerability allows DoS, potential RCE
…etc.) in vulnerable ‘rewrite’ rules with named captures, which eliminates the main exploitation prerequisite. Exploitability in the real world Some security researchers have pushed back on the real-world exploitability claims surrounding…
Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
…The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger…
New critical Exim mailer flaw allows remote code execution
…vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by an unauthenticated remote attacker to execute arbitrary code. Identified as CVE-2026-45185 , the security issue…
New Fragnesia Linux flaw lets attackers gain root privileges
…privilege escalation vulnerability now actively exploited in the wild . CISA added Copy Fail to its catalog of flaws exploited in attacks on May 1 and ordered federal agencies to secure their Linux…