Daily CyberSecurity (securityonline.info) Exploited SolarWinds Serv-U network-edge3 min read
Latest signal The Hacker News Exploited in the wild Cisco Catalyst SD-WAN Manager (vManage/SD-WAN vManage) privilege-escalation Cisco
Jun 6
Security news, decoded.
What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.
Earlier39 stories
Jun 5
BleepingComputer Exploited SolarWinds Serv-U Clop ransomware gang4 min read
CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers
Jun 5
Rapid7 Blog PoC Apache ActiveMQ rce6 min read
Metasploit Wrap-Up 05-06-2026
Jun 5
Bishop Fox Research UniFi OS Server rce22 min read
Popping Root on UniFi OS Server: Unauthenticated RCE Chain Detection & Analysis
Jun 5
SecurityWeek Patch Chrome 149 patch-tuesday2 min read
Chrome 149 Patches 429 Vulnerabilities
Jun 5
The Hacker News Exploited Everest Forms Pro (WordPress plugin) web-app5 min read
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
Jun 5
BleepingComputer Exploited Cisco Catalyst SD-WAN Manager (SD-WAN vManage) network-edge4 min read
Cisco warns of unpatched SD-WAN zero-day exploited in attacks
Jun 5
SecurityWeek Exploited Cisco Catalyst SD-WAN Manager (CLI) UAT-86163 min read
Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026
Jun 5
Palo Alto Unit 42 Exploited PAN-OS auth-bypass5 min read
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257
Jun 4
The Hacker News PoC Cisco Unified Communications Manager (Unified CM) rce3 min read
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public
Jun 4
Jun 4
SecurityWeek Exploited Mirasvit Full Page Cache Warmer for Magento 2 web-app3 min read
Mirasvit Vulnerability Exploited to Execute Code on Magento Servers
Jun 4
BleepingComputer PoC Cisco Unified Communications Manager (Unified CM) rce3 min read
Cisco warns of critical Unified CM flaw with PoC exploit code
Jun 3
BleepingComputer PoC HTTP/2 implementations (nginx, Apache httpd, Envoy, IIS, Cloudflare Pingora) ddos-botnet4 min read
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
Jun 3
Dark Reading Patch Microsoft 365 Android apps (Word, Excel, PowerPoint, OneNote, Loop) info-disclosure6 min read
Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
Jun 3
The Hacker News PoC Redis rce6 min read
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
Jun 3
The Hacker News Exploited Mirasvit Full Page Cache Warmer for Magento 2 web-app4 min read
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
Jun 3
The Hacker News PoC Microsoft 365 Copilot for Android mobile4 min read
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
Jun 3
The Hacker News Research Windows URI handler (search:) web-app3 min read
Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Jun 3
The Hacker News PoC NGINX web-app4 min read
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
Jun 2
The Hacker News Exploited Android Framework mobile3 min read
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Jun 2
The Hacker News Exploited WinRAR Gamaredon5 min read
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
Jun 2
The Hacker News Exploited Oracle WebLogic Server network-edge3 min read
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
Jun 1
Dark Reading Exploited Windows Defender zero-day7 min read
Microsoft's Zero-Day Legal Threats Spark Backlash
Jun 1
Check Point Research Roundup ShinyHunters data-breach6 min read
1st June – Threat Intelligence Report
Jun 1
Dark Reading Exploited PAN-OS GlobalProtect portal auth-bypass6 min read
Patch Now: Another Palo Alto Auth Bypass Bug Under Active Exploit
Jun 1
The Hacker News Advisory Gogs rce18 min read
⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More
Jun 1
Rapid7 Blog Patch HP Poly VVX mobile11 min read
CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)
Jun 1
Rapid7 Blog Research CVE-2026-0826 (HP Poly VVX/Trio) mobile7 min read
CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation
Jun 1
Kaspersky Securelist Research Containers TeamPCP21 min read
Containers on fire: from container escapes to supply chain attacks
Jun 1
The Hacker News Exploited WP Maps Pro web-app4 min read
Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts
May 30
The Hacker News Exploited PAN-OS network-edge3 min read
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
May 29
Rapid7 Blog Roundup Metasploit Framework rce5 min read
Metasploit Wrap Up 05/29/2026
May 29
The Hacker News Advisory ChatGPT ai-ml11 min read
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
May 29
Rapid7 Blog Exploited PAN-OS network-edge13 min read
Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
May 29
The Hacker News Exploited Marimo ai-ml5 min read
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
May 29
Bishop Fox Patch UniFi Network Application info-disclosure24 min read
Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557
May 29
Kaspersky Securelist Research Kaspersky Container Security rce18 min read
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and
May 29
Risky Business News Exploited Asocks ddos-botnet23 min read