🟡VulnerabilitiesCRITICAL
OHIF Viewers DICOM
Critical SSRF flaw in OHIF DICOM Viewer (CVE-2026-12473, CVSS 8.2) steals clinician tokens via malicious links. Attackers gain access to patient imaging data and healthcare systems.
🟡Vulnerabilities2120 stories · page 34 of 71
Vulnerabilities
Latest cybersecurity vulnerabilities news, analysis, and intelligence.
🟡VulnerabilitiesMEDIUM
Local Police Collusion Hampers Crackdown on Asian Scam Centers
Southeast Asian scam centers generate $20-60 billion annually through organized fraud. Local police collusion, enabled by deep economic integration, undermines international enforcement efforts to dismantle these operations at their source.
🟡VulnerabilitiesMEDIUM
Microsoft quietly extends free Windows 10 ESU support to October 2027
Microsoft extended Windows 10 free security updates to October 2027, a quiet two-year postponement that signals retreat from Windows 11 pressure. The extension raises questions about Microsoft's confidence in its newest operating system.
🟡VulnerabilitiesCRITICAL
Delta Electronics DTM Soft
Critical deserialization vulnerability (CVE-2026-12578) in Delta Electronics DTM Soft allows arbitrary code execution when opening malicious project files, directly threatening manufacturing and industrial control systems worldwide. Attacks can be delivered via email, USB, or network shares.
🟡VulnerabilitiesMEDIUM
PirloTV sports piracy network disrupted as 44 domains seized
Enforcement action seized 44 PirloTV piracy domains with 950+ million annual visits, targeting an intermediary linking users to unauthorized sports streams primarily from Latin America.
🟡VulnerabilitiesHIGH
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
**Popular YouTube ad blocker (10M+ installs) harbors dormant script injection capability allowing remote arbitrary code execution on any visited website without needing updates or Chrome Web Store reviews, though no active exploitation has been confirmed.**
🟡VulnerabilitiesMEDIUM
Bluekit phishing kit adopts browser-in-the-middle for login theft
Bluekit phishing escalates with browser-in-the-middle attacks that intercept credentials. Nearly 70 new domains weekly show aggressive expansion of this sophisticated, hard-to-detect attack method.
🟡VulnerabilitiesHIGH
GitLab Patches Code Execution, Information Disclosure Vulnerabilities
GitLab released patches for 13 vulnerabilities, including 3 high-severity remote code execution and data disclosure flaws. Organizations must update urgently to protect source code, credentials, and CI/CD infrastructure from exploitation.
🟡VulnerabilitiesCRITICAL
Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning
Critical RCE vulnerability CVE-2025-67038 in Lantronix EDS5000 serial-to-IP devices allows unauthenticated root command execution and is being actively exploited. The flaw threatens operational technology environments like healthcare and industrial systems. CISA mandated federal agencies patch by Ju
🟡VulnerabilitiesHIGH
25-Year-Old Vulnerability Patched in Curl
Curl patched 18 vulnerabilities including CVE-2026-8932, a 25-year-old authentication bypass in libcurl. AI-driven scanning surfaced this flaw, marking curl's largest security update.
🟡VulnerabilitiesCRITICAL
Chrome 149 Update Resolves 18 Severe Vulnerabilities
Chrome 149 patches 18 vulnerabilities, over half being use-after-free bugs enabling remote code execution. These can be triggered via malicious webpages with minimal user interaction, making immediate deployment critical.
🟡VulnerabilitiesCRITICAL
Cisco SD-WAN Zero-Day Exploited Months Before Patching
Cisco SD-WAN Manager zero-day CVE-2026-20245 was actively exploited for months before patching in June 2026. The 7th Cisco SD-WAN vulnerability weaponized this year, it enables authenticated attackers to execute root-level commands on critical infrastructure management systems.
🟡VulnerabilitiesCRITICAL
Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access
Cisco SD-WAN zero-day CVE-2026-20245 allowed months of root-level compromise. The attacker demonstrated sophistication in data extraction, backdoor creation, and forensic evidence destruction.
🟡VulnerabilitiesCRITICAL
Attackers Hit Cisco SD-WAN Flaw 2 Months Before Disclosure
A critical Cisco SD-WAN flaw (CVE-2026-20245) enabled privilege escalation to root access; attackers exploited it for two months before the June disclosure, exposing unpatched deployments to two months of undisclosed active exploitation.
🟡VulnerabilitiesCRITICAL
Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access
Mandiant disclosed CVE-2026-20245, a command injection flaw in Cisco SD-WAN. Attackers combined this vulnerability with authentication bypasses to achieve root access and create persistent backdoors.
🟡VulnerabilitiesMEDIUM
When Information Becomes the Attack Surface Understanding AI Agent Traps
Attackers manipulate autonomous AI agents by poisoning trusted data sources with hidden instructions. Bypassing traditional security, these attacks succeeded 57% of the time in controlled tests.
🟡VulnerabilitiesCRITICAL
More Malicious OpenClaw Skills Threaten AI Supply Chain
Five malicious OpenClaw skills exploited ClawHub's weak vetting to steal credentials and evade detection. The incident highlights critical supply chain vulnerabilities in AI agent marketplaces.
🟡VulnerabilitiesCRITICAL
CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited
CISA warns of active exploitation in Lantronix and Ubiquity infrastructure devices. Both flaws allow unauthenticated root access, enabling network compromise. Federal agencies must patch by June 26, 2026.
🟡VulnerabilitiesHIGH
Securing the service desk: Why social engineering attacks keep succeeding
Service desks remain targets because helping users conflicts with verifying identity. Attackers exploit this with reconnaissance and pressure to steal credentials, a gap training hasn't closed.
🟡VulnerabilitiesMEDIUM
Using SASE in a Modern TIC 3.0 Solution
CISA's TIC 3.0 shifts federal agencies to zero trust security with SASE, validating every user and device. This modernizes defenses for 100+ agencies adapting to distributed workforces and threats.
🟡VulnerabilitiesCRITICAL
Exclusive: Meet AIVEX, a New Triage Model Built to Reduce Supply Chain Threat and Risk
CVSS scores fail for autonomous systems—a low-score sensor flaw poses more risk than critical backend RCE. AIVEX adds consequence context to fix vulnerability prioritization.
🟡VulnerabilitiesCRITICAL
CISA warns of max severity Ubiquiti flaws exploited in attacks
CISA ordered emergency patching for actively exploited critical Ubiquiti and Lantronix flaws enabling remote code execution and command injection. Working public exploits are already available.
🟡VulnerabilitiesCRITICAL
Critical Ubiquiti Vulnerabilities in Attackers Crosshairs
Ubiquiti devices face critical unauthenticated vulnerabilities affecting millions globally. Attackers can execute commands, hijack accounts, and modify configurations remotely.
🟡VulnerabilitiesCRITICAL
macOS Weaknesses Chained to Silently Disable Endpoint Security Agents
A macOS attack chain lets unprivileged users silently disable endpoint security agents by chaining legitimate OS behaviors. This weaponizes standard functionality to evade enterprise defenses without requiring admin access, creating a critical blind spot in Mac security deployments.
🟡VulnerabilitiesHIGH
Dawn of the Apex Agentic Adversary
Autonomous AI attackers now exploit vulnerabilities in hours, not weeks. The traditional patch-deployment timeline that guided cybersecurity for two decades is fundamentally broken.
🟡VulnerabilitiesCRITICAL
Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking
Cordyceps lets unauthenticated attackers hijack CI/CD workflows in 300+ repos to steal credentials and inject malicious code. The flaw: workflows are treated as configuration rather than security code.
🟡VulnerabilitiesHIGH
Apple's MacOS Gap Lets Users Disable Security Tools
A macOS vulnerability allows standard users to disable enterprise security tools like EDR and MDM without admin credentials by impersonating trusted applications through CDHash spoofing—no kernel exploits or audit trails required.
🟡VulnerabilitiesMEDIUM
DoJ Seizes Huione Cloud Account Tied to Cyber Scam Money Laundering
DoJ dismantled HuiOne Group's Cambodia-based Telegram marketplace (2021-2025), which facilitated billions in fraud and human trafficking. The takedown marks the first coordinated federal enforcement targeting both the operation's financial and operational infrastructure.
🟡VulnerabilitiesHIGH
Webinar Today: Modern Exposure Validation in the AI Era
AI-powered tools collapse vulnerability exploitation from weeks to hours, enabling rapid automated exploit generation and weaponization. Traditional exposure validation processes built for slower threat cycles now fail against real-time attacks, leaving organizations dangerously out of sync.
🟡VulnerabilitiesCRITICAL
Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Critical RCE (CVE-2026-20230) in Cisco Unified CM allows unauthenticated attackers to execute code as root. Active exploitation via public PoC poses immediate risk to unpatched enterprise phone systems.