CISA warns of active attacks exploiting Android, Linux bugs
…The issue has been addressed with the release of June 2026 security patches (2026-06-01 and 2026-06-05 security patch levels). The second vulnerability CISA added to KEV is tracked…
Search
All sources
bleepingcomputer.com
51
pcworld.com
19
arstechnica.com
5
macrumors.com
4
techcrunch.com
3
guru3d.com
3
appleinsider.com
3
about.gitlab.com
2
wired.com
2
windowscentral.com
2
theverge.com
2
phoronix.com
2
Videos
More videos
VLOG Thursday 491: Firewall Vulnerabilities & Security, Virtualization & Homelab Q&A
VLOG Thursday 490: UniFi, Vulnerabilities & Security, Virtualization & Homelab Q&A
I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities)
MSI Trades Security for RGB
AMD Gaslights Security Researcher, Changes Rules Retroactively
Reinventing Web Security
Security-driven Rapid Release - Pwn2Own Documentary (Part 4)
A Vulnerability to Hack The World - CVE-2023-4863
Network Security Basics - Are you doing these things?
Top stories
Microsoft paid $20 million to security researchers in biggest-ever bug bounty payout
…Microsoft detailed the rewards in a recent blog post . "Security is a team sport. Every vulnerability reported through our bounty programs represents an opportunity to address risk before it can be exploited…
Critical Progress LoadMaster flaw now actively exploited in attacks
…Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. Kemp LoadMaster is a very popular Application Delivery Controller (ADC) and server…
CISA flags two-year-old Oracle flaw as actively exploited in attacks
…Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was patched two years ago and is now actively…
Discussions and forums
Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates
Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI. https://www.securityweek.com/oracle-patches-over-1400-vulnerabilities-with-quarterly-security-updates/ submitted by…
China Says It Has Found Security Vulnerabilities in Anthropic's Claude Code
China Says It Has Found Security Vulnerabilities in Anthropic's Claude Code
4
2
Grok 4.5 and GPT5.6 beat Anthropic for finding security vulnerabilities in PRs
Grok 4.5 and GPT5.6 beat Anthropic for finding security vulnerabilities in PRs
10
1
Ask HN: Are other OS maintainers being spammed with Security Vulnerabilities?
I'm being hit with small, nitpick security vulnerabilities, like being able to IDOR profile images for other users on a self-hosted software.Then the submitters are spamming me to release a vulnerability, despite me mess…
3
7
Regarding the TPM Vulnerability and Security Update
By now, most of us know about the recent security vulnerabilities affecting TPM 2.0 modules across a wide range of Ryzen processors. I'm a strong believer that if it ain't broken, don't fix it. I have never updated my BI…
CISA warns admins to patch actively exploited SharePoint flaws
…Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. These security flaws (tracked as CVE-2026-32201…
Microsoft fixes 167 security flaws in April, second biggest Patch Tuesday ever
With April's Patch Tuesday hitting just yesterday, Microsoft released updates to address 167 security vulnerabilities. This is the second highest number of vulnerabilities ever patched on a Patch Tuesday (beat out…
Now in preview: Find and fix software vulnerabilities with CodeMender | Google Cloud Blog
…CodeMender’s harness with security context helps you discover sophisticated vulnerabilities that static and model-only scanning miss. These scans look for hard-to-find vulnerabilities like memory corruption, injection, web security…
Critical Fortinet FortiSandbox flaws now exploited in attacks
…Most recently, Fortinet released security updates to address another critical vulnerability in FortiSandbox (CVE-2026-26083) that could let attackers achieve remote code execution on unpatched systems. In February, it also patched…
Cisco finally confirms attackers exploiting Unified CM flaw
…One day later, SSD Secure also published a technical write-up that included a proof-of-concept exploit and explained how the vulnerability works. BleepingComputer contacted Cisco at the time to ask…
Microsoft's May updates patch 120 security flaws in Windows and Office
Yesterday was May's Patch Tuesday, meaning Microsoft released new updates that addressed 120 security vulnerabilities. In addition to Windows and Office, Microsoft's cloud services were also affected. So far, none…