… Download Now Related Articles: Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026 Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own Recently leaked Windows zero-days now exploited in attacks Windows BitLocker zero-day gives access to protected drives, PoC released New Wind… …
… Cisco released security updates for the CVE-2026-20230 flaw on June 3, warning that exploitation could give attackers root privileges on the device. …
Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026 By Sergiu Gatlan May 18, 2026 01:33 AM The Pwn2Own Berlin 2026 hacking contest has concluded, with security researchers collecting $1,298,250 in rewards after exploiting 47 zero-day flaws. …
Google fixes one actively exploited Android zero-day, 124 flaws By Sergiu Gatlan June 2, 2026 07:10 AM Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. …
… Tracked as CVE-2026-10520 , the maximum-severity vulnerability stems from an OS command injection weakness and was patched by Ivanti on Tuesday with the release of Sentry versions R10.5.2, R10.6.2, and R10.7.1. …
… Internet security watchdog group Shadowserver currently tracks nearly 800 Adobe ColdFusion instances exposed online, but there is no information on how many are honeypots or have been secured against attacks targeting the CVE-2026-48282 flaw. …
… "Within under two hours of CVE-2026-48282 public details being released, KEVIntel captured in-the-wild exploitation within our global honeypot network," Dewhurst said . …
… 24 Targeting the education sector Mandiant released a report confirming that threat actors exploited the Oracle PeopleSoft CVE-2026-35273 vulnerability as a zero-day, primarily targeting organizations in the education sector. …
… Fortinet released security updates for these three critical-severity security flaws tracked as CVE-2026-39813 , CVE-2026-39808 , and CVE-2026-25089 on April 14. …
… This allowed the attackers to publish malicious package versions directly through legitimate releases, with the packages appearing legitimate. …