Vulnerabilities

Vulnerabilities | News, how-tos, features, reviews, and videos

Critical Cisco Secure Email Gateway zero-day gives attackers root access

‘A root-level, unauthenticated RCE in an email gateway is about as good a foothold as an attacker gets.’

Sep 15, 2026 3 mins

Communications Security Email Security Network Security

A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove

The vulnerability impacts self-managed CE and EE instances and provides an unauthenticated path to arbitrary file reads. It’s already being probed in the wild.

Sep 14, 2026 5 mins

CI/CD Devops GitLab

ConnectWise patches critical ScreenConnect authentication failure after five days

The company seeks to reassure users after revealing a new vulnerability.

Sep 11, 2026 2 mins

Network Security Remote Access Security Zero-Day Vulnerabilities

Attackers are weaponizing the gap between Chromium fixes and Chrome patches

The ‘BlueMoon’ attack chains three high-severity Chrome and Windows flaws, raising concerns that sophisticated exploitation is becoming faster and more reusable.

Sep 10, 2026 5 mins

Browser Security Endpoint Protection Vulnerabilities

How a global investment firm reduced security surprises

Organization also surprised by ease of deployment and effectiveness of continuous validation.

Aug 6, 2026 4 mins

Security Security Practices Vulnerabilities

MikroTik patches flaws currently being exploited to take over routers

MikroTrick chains together two of six patched vulnerabilities to obtain root privileges on MikroTik devices with SSH exposed to the internet, of which they are more than 120,000.

Sep 9, 2026 4 mins

Network Security Security Vulnerabilities

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

Microsoft also patched other bugs that analysts deem wormable, Adobe and Cisco issued critical updates, and SAP patched a critical vulnerability in NetWeaver and S/4HANA.

Sep 8, 2026 9 mins

Security Vulnerabilities Zero-Day Vulnerabilities

Cisco bundles fixes for multiple vulnerabilities, some critical, into one patch

The patch addresses two critical vulnerabilities and five other high-severity bugs impact Cisco’s carrier-grade routing OS, with potential paths to RCE and unauthorized access.

Sep 8, 2026 6 mins

Network Security Security Vulnerabilities

Adobe Commerce max-severity bug comes under active attack

Attackers are exploiting the critical StyleSmuggler flaw to execute code without authentication and plant stealthy backdoors on vulnerable online stores.

Sep 8, 2026 4 mins

Security Vulnerabilities Zero-Day Vulnerabilities

Back-to-back N-able bugs send admins on a patching spree

N-able is asking admins to patch against a CVSS 10.0 zero-day in its N-central RMM platform, a day after disclosing and patching two other vulnerabilities affecting the product.

Sep 7, 2026 4 mins

Network Security Remote Access Security Zero-Day Vulnerabilities