Vulnerability

New Zero-Click Android Vulnerability Lets Attackers Crash Phones With a Single SMS

A recently discovered Android vulnerability, referred to as SMS of Death, allows attackers to crash a phone's telephony process with…

1 week ago

Chinese Hackers Exploit VMware ESXi Zero-Day to Target Law Firms in Cyber Espionage Attacks

Chinese state-linked hackers have exploited a zero-day vulnerability in VMware ESXi during espionage operations aimed at U.S. law firms, according…

1 week ago

Microsoft Edge Security Flaws Allow Attackers to Execute Code Without Memory Corruption

Researcher Orange Tsai from DEVCORE has published a complete exploit chain for Microsoft Edge that successfully escapes the browser's sandbox…

1 week ago

CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to…

1 week ago

Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls

Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure…

1 week ago

CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js

CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following…

1 week ago

Cloudflare Image Transformation Flaw Allows Hackers to Bypass CSP and Execute Malicious JavaScript

Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy…

1 week ago

Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers

Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three…

1 week ago

Critical Veeam Backup & Replication Flaw Allows Unauthenticated Attackers to Bypass Authorization

Veeam has released security updates to address a critical authorization bypass vulnerability in Backup & Replication. This flaw, tracked as…

1 week ago

Critical UEFI Firmware Flaw Allows Attackers to Execute Malicious Code Before OS Boots

A critical vulnerability in EDK II's PXE network boot driver could allow unauthenticated attackers to execute malicious code before the…

1 week ago