Vulnerabilities
Your network is a road map, not an asset list.
The assumption is no longer optional: zero failures continue to appear, automation and IA accelerate the creation of exploits and the old mandate of "patching all in time" ceased …
Category of intelligence
Vulnerabilities
News about security failures, exploits and vulnerabilities in systems
Vulnerabilities
CISA KEV alert critical vulnerabilities on Android and Linux that allow you to climb privileges and container escapes
CISA has included in its catalogue of Known and Exploited Vulnerabilities (KEV) two failures that risk both Android devices and Linux-based infrastructure: an entire overflow in t…
Vulnerabilities
CVE-2026-23479: the Use-after-free Redis failure that could turn your server into a remote execution door
A new explosion for Reis, registered as CVE-2026-23479, has replaced the focus on how subtle failures in mature code can become remote execution doors in productive environments. …
Vulnerabilities
The annual cadence left a global gap in financial security requires continued monitoring and real governance
In April, a single vulnerability in a remote access service triggered data gaps in more than seventy financial institutions that shared infrastructure with a third supplier; the p…
Vulnerabilities
Security alert: two critical vulnerabilities in Acer Wave 7 routers could expose credentials and allow back doors
Acer has confirmed that he is working on patches for two most serious vulnerabilities that affect his Wave 7 mesh routers with T7c _ GBL _ 1.01.000055 firmware or earlier versions…
Vulnerabilities
Vulnerability without patch exposes NTLMv2 to links manipulated by URI handlers
Cybersecurity researchers have described a patch-free vulnerability that allows an attacker to cause the filtration of a user's NTLMv2 hash by inducing the opening of manipulated …
Vulnerabilities
Zero Day Alert in Visual Studio Code: A single click could steal your GitHub tokens
A security researcher published exploit code for a zero-day vulnerability in Visual Studio Code that allows to steal GitHub authentication tokens with a single click on a maliciou…
Vulnerabilities
Microsoft launches Coreutils for Windows: a single binary for dozens of POSIX commands and their security dilemmas
Microsoft presented in Build 2026 a native Windows version of many traditional Linux command line utilities, packaged as Coreutils for Windows and built on the open source project…
Vulnerabilities
Security Alert CVE-2026-8206 in Kirki allows attackers to restore passwords and take full control of WordPress
A serious failure in the popular Kirki visual builder - known as "Kirki - Freeform Page Builder, Website Builder & Customizer" - is being actively exploited to kidnap WordPress ac…