You Don't Have to Run an Exploit to Know If You're Vulnerable
…Unfortunately for security teams, defenses haven't moved anywhere near that fast, and no team can patch its way out of a backlog that’s literally growing by the minute. But volume…
Search
Hackers target WordPress sites in miniOrange auth bypass attacks
…The second security issue, CVE-2026-15981, causes the plugin to treat an OpenSSL verification error (-1) as a successful result, allowing malformed signatures to pass validation. According to security firm Patchstack…
Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days
…Last week, Microsoft warned that there would be an increase in Patch Tuesday security updates as it has begun to use an AI-powered vulnerability discovery system to identify more security flaws…
Trend Micro warns of Apex One zero-day exploited in the wild
…Cybersecurity and Infrastructure Security Agency (CISA) also added CVE-2026-34926 to its list of actively exploited vulnerabilities and ordered federal agencies to patch their devices by June 4. "These types of…
New Certighost PoC exploit lets attackers hijack Windows domains
…Tracked as CVE-2026-54121 , the vulnerability was fixed by Microsoft as part of the July 2026 Patch Tuesday security updates. "An authenticated attacker could manipulate attributes associated with a machine account…
vBulletin fixes critical pre-auth RCE flaw with public exploit
…Security patches were backported to earlier releases, tagged as ‘Patch Level 1,’ including for v6.2.1, v6.2.0, and v.6.1.6. Wayne Luke, vBulletin’s technical support lead…
Certighost and the Privilege Hiding in Your Certificate Authority
…identity security. The Certification Authority is not a passive appliance. It is a privileged identity in its own right, one that manufactures trust on behalf of the entire domain. The patch Microsoft…
CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws
…The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger…
New StormEncryptor ransomware used by former Medusa affiliate
…few days,” warned Microsoft . “Organizations are urged to monitor for Storm-1175 activity and apply security patches as soon as possible.” N-able addressed the CVE-2026-18577 vulnerability via a hotfix…
Microsoft fixes BitLocker recovery bug on Windows Server 2025
…System Information ( msinfo32.exe ) reports that the Secure Boot State PCR7 Binding is " Not Possible ". The Windows UEFI CA 2023 certificate is present in the device's Secure Boot Signature Database (DB…