🟡VulnerabilitiesHIGH
Organizations Warned of Exploited Linux Kernel Vulnerability
CVE-2022-0492 in Linux cgroups allows container escape and root access. Despite disclosure years ago, active exploitation wasn't confirmed until June 2026.
🟡Vulnerabilities2120 stories · page 44 of 71
Vulnerabilities
Latest cybersecurity vulnerabilities news, analysis, and intelligence.
🟡VulnerabilitiesHIGH
Kirki, Burst Statistics WordPress Plugin Flaws in Attackers Crosshairs
Attackers exploit flaws in WordPress plugins Kirki and Burst Statistics to seize admin control of hundreds of thousands of sites. Both enable backdoor installation and are being actively exploited.
🟡VulnerabilitiesMEDIUM
Zoom CISO: AI as a Security Enabler, Not Role-Replacer
Zoom's CISO argues AI enables but doesn't replace security defenders. Sandra McLeod dispels automation myths and shares practical guidance for integrating AI into security operations at global scale.
🟡VulnerabilitiesMEDIUM
Malicious Notifications Could Trick Google Gemini Users
Google Gemini's voice assistant is vulnerable to prompt injection attacks hidden in notifications, allowing attackers to bypass safety filters and execute unauthorized commands including data extraction and device manipulation without user awareness.
🟡VulnerabilitiesCRITICAL
What 345 Days of Untested Exposure Looks Like at a Bank
Annual penetration tests create a dangerous 345-day security gap: a two-week snapshot misses the constantly evolving threat landscape of cloud deployments, code updates, and zero-days that emerge year-round. Banks relying on periodic assessments face undetected vulnerabilities for months between eng
🟡VulnerabilitiesHIGH
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
HTTP/2 Bomb enables trivial DoS attacks on NGINX, Apache, and IIS via HPACK compression. A single client can exhaust 32GB of memory in seconds with minimal bandwidth by holding connections indefinitely, exploiting a flaw in HTTP/2's specification.
🟡VulnerabilitiesHIGH
Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Windows Search's URI handler leaks NTLMv2 hashes via malicious links; Microsoft won't patch. Stolen hashes enable relay attacks to compromise networks, similar to a patched Snipping Tool flaw.
🟡VulnerabilitiesCRITICAL
Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore
Most networks rely on inaccurate asset inventories while attackers map actual pathways between devices. The real vulnerability is the gap between assumed segmentation and actual connectivity.
🟡VulnerabilitiesMEDIUM
Police dismantles 9 crime groups in illegal streaming crackdown
Thirteen countries dismantled nine illegal streaming networks in Operation KRATOS 2, arresting 29 and identifying 86 suspects. The crackdown targeted complete piracy infrastructure beyond customer websites, marking a major shift in international cybercrime enforcement.
🟡VulnerabilitiesCRITICAL
Acer working to patch max severity zero-days in Wave 7 routers
**Summary:** Two critical zero-days in Acer Wave 7 routers enable credential theft and backdoor injection via hardcoded keys. Unauthenticated remote exploitation is possible; patches expected by late June 2026.
🟡VulnerabilitiesMEDIUM
Google adds Android protection against AI deepfake scam calls
Google launched "fake call detection" on Android to block AI-powered deepfake impersonation calls, a fraud tactic combining voice cloning and caller ID spoofing that cost U.S. users $2.95B in losses during 2024.
🟡VulnerabilitiesCRITICAL
VS Code zero-day lets hackers steal GitHub tokens in one click
A critical VS Code vulnerability allows attackers to steal GitHub tokens through malicious links, exposing millions of developers to unauthorized repository access. Compromised tokens enable code injection, credential theft, and supply chain attacks without user awareness.
🟡VulnerabilitiesMEDIUM
FBI-Flagged Phishing Kit Kali365 Expands Its Reach
Kali365, a phishing-as-a-service platform, has expanded from targeting Microsoft 365 to AWS, Okta, Xerox DocuShare, and Russian services like MAX Messenger (80+ million users). Using device code phishing, it bypasses MFA to compromise accounts across enterprise and state-backed platforms.
🟡VulnerabilitiesMEDIUM
Zoom CISO: AI as Security Enabler, Not Role-Replacer
Zoom's CISO Sandra McLeod argues AI will augment—not replace—security professionals, automating repetitive tasks while preserving human judgment. Her security philosophy balances strong defenses with user flexibility through education and transparent controls.
🟡VulnerabilitiesCRITICAL
Critical Kirki flaw exploited to hijack WordPress admin accounts
Kirki WordPress plugin (CVE-2026-8206) has critical flaw allowing unauthenticated admin account hijacking via password reset redirection. 40% of 500,000+ installations vulnerable; 222+ exploits confirmed in 24 hours.
🟡VulnerabilitiesMEDIUM
China Uses Dual-Method Cyberattack on Czech Orgs
Chinese state actors conduct Operation Dragon Weave, using Azureveil malware via spear-phishing against Czech and Taiwanese government and financial organizations to steal sensitive data.
🟡VulnerabilitiesMEDIUM
DriveSurge Hijacks Thousands of Sites for ClickFix, FakeUpdate Attacks
DriveSurge hijacked thousands of websites over a year to deliver ClickFix and FakeUpdate malware to Windows and macOS users via a sophisticated initial access broker ecosystem.
🟡VulnerabilitiesHIGH
KMW CCTV Security Cameras
CVE-2026-5386 in KMW CCTV cameras allows unauthenticated password reset, enabling remote takeover of surveillance feeds at critical infrastructure (CVSS 9.1). Attackers gain full access without credentials, exposing facilities to reconnaissance and physical security breaches.
🟡VulnerabilitiesMEDIUM
Securing AI Agents Before They Go Rogue Is Next to Impossible
AI agents deployed with excessive system privileges and minimal oversight represent a new insider threat, capable of exfiltrating data, manipulating records, or attacking infrastructure at machine speed without accountability. Organizations rushing to automate workflows lack proper containment, moni
🟡VulnerabilitiesHIGH
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
Oracle WebLogic vulnerability CVE-2024-21182 enables unauthenticated remote code execution via unsafe T3 protocol deserialization. Now actively exploited with CVSS 7.5, it poses critical risk to enterprises globally.
🟡VulnerabilitiesHIGH
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
Russian APT Gamaredon launches escalating campaign against Ukraine, exploiting WinRAR flaw CVE-2025-8088 chained with three malware families (GammaPhish, GammaWorm, GammaSteel) for data theft and lateral movement.
🟡VulnerabilitiesCRITICAL
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Google patched 124 Android vulnerabilities in June 2026, including CVE-2025-48595—a critical privilege escalation flaw actively exploited in the wild. The flaw requires no user interaction, making it exceptionally dangerous for unpatched devices.
🟡VulnerabilitiesHIGH
Two New Reports Offer Competing Explanations for Cybersecuritys Growing Crisis
AI is accelerating vulnerability exploitation faster than organizations can patch them. The cybersecurity industry splits on the root cause: inadequate tools or poor operational management of existing ones.
🟡VulnerabilitiesMEDIUM
Why the browser is now the front line for AI security
Browsers now face dual AI threats: rapidly evolving attacker phishing kits (device code attacks surged 37x in 2026) and employees leaking secrets to unvetted AI apps. Traditional security misses both gaps.
🟡VulnerabilitiesMEDIUM
Microsoft Exchange Online outage causes email delays, failures
Microsoft Exchange Online suffered a global outage June 2, causing hour-plus email delays across North America, Europe, and APAC. The incident stemmed from mail flow pipeline resource exhaustion, generating SMTP deferral and connection closure errors affecting enterprise customers worldwide.
🟡VulnerabilitiesCRITICAL
Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities
Google patched 124 Android vulnerabilities, including CVE-2025-48595—a critical zero-day actively exploited in targeted attacks. Eighteen additional flaws enable privilege escalation and remote code execution.
🟡VulnerabilitiesMEDIUM
Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk
A debug flag in six Microsoft Android apps bypassed token security protections. The flaw allowed any third-party app to access Microsoft account credentials, potentially affecting billions of users.
🟡VulnerabilitiesHIGH
Oracle WebLogic Vulnerability Exploited in the Wild
CVE-2024-21182 is a critical unauthenticated RCE in Oracle WebLogic actively exploited in the wild. Attackers compromise servers via network requests, putting enterprises at immediate risk.
🟡VulnerabilitiesCRITICAL
Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches
HP VoIP phones contain a critical unauthenticated RCE vulnerability. Attackers can gain control and pivot into enterprise networks, since VoIP phones are rarely monitored.
🟡VulnerabilitiesMEDIUM
Anthropic Expanding Mythos Access to 150 New Organizations
Anthropic expanded Mythos vulnerability discovery to 150 organizations, tripling its user base. Early adopters found thousands of unknown flaws, shifting AI-powered security research from an exclusive tool to wider industry access.