SecurityWeek Exploited Serv-U patch-tuesday2 min read
Latest signal Kaspersky Securelist Incident 4BID ransomware Goffee
Jun 8
Security news, decoded.
What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.
Earlier39 stories
Jun 8
Daily CyberSecurity (securityonline.info) Patch VMware Cloud Foundation Operations web-app4 min read
Broadcom Fixes Critical VMware Stored XSS Bugs
Jun 8
Daily CyberSecurity (securityonline.info) Patch Shopper Laravel (admin panel) web-app3 min read
Shopper Laravel Flaw Exploit Sparks Urgent E-Commerce Security Warning
Jun 8
Daily CyberSecurity (securityonline.info) Advisory Progress Sitefinity web-app3 min read
Critical Sitefinity Vulnerabilities: CVSS 10.0 Security Alert
Jun 8
Daily CyberSecurity (securityonline.info) Patch Collibra Platform Agent rce4 min read
Collibra Platform Agent Flaws Allow Remote Code Execution Without Authentication
Jun 8
Daily CyberSecurity (securityonline.info) Exploited CISA zero-day4 min read
Weekly Threat Intelligence: June 1 to June 7, 2026
Jun 8
Daily CyberSecurity (securityonline.info) Patch Cloud Foundry UAA cloud3 min read
Critical Cloud Foundry Key Disclosure Bug Exposes JWT Signing Keys
Jun 7
Daily CyberSecurity (securityonline.info) Exploited MariaDB rce3 min read
Millions of Servers At Risk: Crucial MariaDB Flaw Carries Maximum 10.0 CVSS Score
Jun 7
Daily CyberSecurity (securityonline.info) Patch Apache Cordova InAppBrowser plugin mobile3 min read
Critical Cordova Vulnerability Threatens iOS App Data Boundaries
Jun 7
BleepingComputer Research DD-WRT router firmware ddos-botnet4 min read
C0XMO botnet spreads via DD-WRT router flaw, kills rival malware
Jun 6
BleepingComputer Exploited Everest Forms Pro web-app3 min read
Critical Everest Forms Pro flaw exploited to take over WordPress sites
Jun 6
The Hacker News Exploited SolarWinds Serv-U cloud3 min read
CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog
Jun 6
The Hacker News PoC FFmpeg rce5 min read
AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs
Jun 6
The Hacker News Exploited Cisco Catalyst SD-WAN Manager (vManage/SD-WAN vManage) privilege-escalation4 min read
Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available
Jun 6
Daily CyberSecurity (securityonline.info) Exploited SolarWinds Serv-U network-edge3 min read
CISA Warns of Actively Exploited SolarWinds Serv-U Flaw
Jun 5
BleepingComputer Exploited SolarWinds Serv-U Clop ransomware gang4 min read
CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers
Jun 5
Rapid7 Blog PoC Apache ActiveMQ rce6 min read
Metasploit Wrap-Up 05-06-2026
Jun 5
Bishop Fox Research UniFi OS Server rce22 min read
Popping Root on UniFi OS Server: Unauthenticated RCE Chain Detection & Analysis
Jun 5
SecurityWeek Patch Chrome 149 patch-tuesday2 min read
Chrome 149 Patches 429 Vulnerabilities
Jun 5
The Hacker News Exploited Everest Forms Pro (WordPress plugin) web-app5 min read
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites
Jun 5
BleepingComputer Exploited Cisco Catalyst SD-WAN Manager (SD-WAN vManage) network-edge4 min read
Cisco warns of unpatched SD-WAN zero-day exploited in attacks
Jun 5
SecurityWeek Exploited Cisco Catalyst SD-WAN Manager (CLI) UAT-86163 min read
Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026
Jun 5
Palo Alto Unit 42 Exploited PAN-OS auth-bypass5 min read
Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257
Jun 4
The Hacker News PoC Cisco Unified Communications Manager (Unified CM) rce3 min read
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public
Jun 4
Jun 4
SecurityWeek Exploited Mirasvit Full Page Cache Warmer for Magento 2 web-app3 min read
Mirasvit Vulnerability Exploited to Execute Code on Magento Servers
Jun 4
BleepingComputer PoC Cisco Unified Communications Manager (Unified CM) rce3 min read
Cisco warns of critical Unified CM flaw with PoC exploit code
Jun 3
BleepingComputer PoC HTTP/2 implementations (nginx, Apache httpd, Envoy, IIS, Cloudflare Pingora) ddos-botnet4 min read
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
Jun 3
Dark Reading Patch Microsoft 365 Android apps (Word, Excel, PowerPoint, OneNote, Loop) info-disclosure6 min read
Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
Jun 3
The Hacker News PoC Redis rce6 min read
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)
Jun 3
The Hacker News Exploited Mirasvit Full Page Cache Warmer for Magento 2 web-app4 min read
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
Jun 3
The Hacker News PoC Microsoft 365 Copilot for Android mobile4 min read
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
Jun 3
The Hacker News Research Windows URI handler (search:) web-app3 min read
Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Jun 3
The Hacker News PoC NGINX web-app4 min read
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
Jun 2
The Hacker News Exploited Android Framework mobile3 min read
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Jun 2
The Hacker News Exploited WinRAR Gamaredon5 min read
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
Jun 2
The Hacker News Exploited Oracle WebLogic Server network-edge3 min read
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
Jun 1
Dark Reading Exploited Windows Defender zero-day7 min read
Microsoft's Zero-Day Legal Threats Spark Backlash
Jun 1
Check Point Research Roundup ShinyHunters data-breach6 min read