Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process […]
Category: Critical
Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets
Bitcoin wallet company Alby has warned of a critical flaw in Alby Hub that could have let an attacker take over a […]
Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code
Ravie LakshmananSep 05, 2026Vulnerability / Server Security Broadcom has released security updates for two security flaws impacting VMware Workstation and […]
Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow […]
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Ravie LakshmananAug 29, 2026Vulnerability / Web Security Multiple critical security flaws have been disclosed in WordPress plugins and themes, including […]
Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server
cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager […]
Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload
Ravie LakshmananAug 26, 2026Vulnerability / Cryptojacking The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation […]
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account
Swati KhandelwalAug 24, 2026Vulnerability / Identity Security Red Hat and the Keycloak project have released patches to address a critical […]
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
Ravie LakshmananAug 20, 2026Network Security / Enterprise Security Citrix has released updates to address two security flaws impacting NetScaler ADC […]
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
Ravie LakshmananAug 19, 2026Vulnerability / Ransomware The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities […]