Critical vm2 sandbox bug lets attackers execute code on hosts
…The security issue is tracked as CVE-2026-26956 and has been confirmed to impact vm2 version 3.10.4, although earlier releases may also be vulnerable. Proof-of-concept (PoC) exploit…
Search
Related topics:
Google
Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks
…It uses a controller to securely route traffic between sites over encrypted connections. The company says it detected threat actors exploiting the flaw in May, but did not share any details regarding…
Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026
…Windows 11 and Microsoft Edge hacked at Pwn2Own Berlin 2026 Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own Microsoft warns of Exchange zero-day flaw exploited in attacks Google: Hackers…
Avada Builder WordPress plugin flaws allow site credential theft
…Hackers abuse Google ads for GoDaddy ManageWP login phishing Hackers exploit critical flaw in Ninja Forms WordPress plugin Funnel Builder WordPress plugin bug exploited to steal credit cards Hackers exploit auth bypass…
New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released
…The original PoC by Google worked without any changes." BleepingComputer tested the exploit on a fully patched Windows 11 Pro system running the latest May 2026 Patch Tuesday updates. In our test…
Acer working to patch max severity zero-days in Wave 7 routers
…Google fixes one actively exploited Android zero-day, 124 flaws Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released New Gogs zero…
Hackers bypass SonicWall VPN MFA due to incomplete patching
…exploited in the wild Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks Google: Hackers used AI to develop zero-day exploit for web admin tool Actively Exploited…
Drupal: Critical SQL injection flaw now targeted in attacks
…issue that threat actors might start exploiting "within hours or days." The flaw is now tracked as CVE-2026-9082 and was discovered by Google/Mandiant researcher Michael Maturi. It affects Drupal…
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin By Bill Toulas May 14, 2026 05:07 PM Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst…
Google adds Android protection against AI deepfake scam calls
Google adds Android protection against AI deepfake scam calls By Sergiu Gatlan June 3, 2026 05:02 AM Google is introducing a new Android security feature that will detect and flag phone…