The Hacker News Advisory Gogs rce18 min read
Latest signal Dark Reading Exploited in the wild PAN-OS GlobalProtect portal auth-bypass PAN-OS GlobalProtect gateway
Jun 1
Security news, decoded.
What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.
Earlier39 stories
Jun 1
Rapid7 Blog Patch HP Poly VVX mobile11 min read
CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)
Jun 1
Rapid7 Blog Research CVE-2026-0826 (HP Poly VVX/Trio) mobile7 min read
CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation
Jun 1
Kaspersky Securelist Research Containers TeamPCP21 min read
Containers on fire: from container escapes to supply chain attacks
Jun 1
The Hacker News Exploited WP Maps Pro web-app4 min read
Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts
May 30
The Hacker News Exploited PAN-OS network-edge3 min read
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
May 29
Rapid7 Blog Roundup Metasploit Framework rce5 min read
Metasploit Wrap Up 05/29/2026
May 29
The Hacker News Advisory ChatGPT ai-ml11 min read
ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
May 29
Rapid7 Blog Exploited PAN-OS network-edge13 min read
Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
May 29
The Hacker News Exploited Marimo ai-ml5 min read
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
May 29
Bishop Fox Patch UniFi Network Application info-disclosure24 min read
Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557
May 29
Kaspersky Securelist Research Kaspersky Container Security rce18 min read
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and
May 29
Risky Business News Exploited Asocks ddos-botnet23 min read
Dutch police take down giant botnet of 17 million devices
May 28
The Hacker News Exploited FortiClient Endpoint Management Server (EMS) auth-bypass4 min read
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
May 28
The Hacker News Exploited Microsoft Defender Chaotic Eclipse (aka Nightmare-Eclipse)4 min read
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
May 28
The Hacker News Roundup Azure Backup for AKS Silent Ransom Group (SRG)17 min read
ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More
May 28
Rapid7 Blog PoC Gogs rce16 min read
Authenticated RCE via Argument Injection in Gogs (NOT FIXED)
May 27
Cisco Talos Patch MediaInfoLib rce2 min read
MediaArea heap-based buffer overflow vulnerabilities
May 27
OX Security Research OX Platform ai-ml27 min read
Vibe Coding Security: Why 62% Of AI-Generated Code Ships With Vulnerabilities - OX Security
May 27
OX Security Research Mythos ai-ml6 min read
The CVE Is Dead. Long live the Mythos Era. - OX Security
May 27
Risky Business News Patch Starlette (BadHost, CVE-2026-48710) auth-bypass2 min read
BadHost vulnerability bypasses authentication on AI infrastructure
May 26
Ars Technica (Security) Patch Starlette supply-chain2 min read
Millions of AI agents imperiled by critical vulnerability in open source package
May 26
Dark Reading Patch SharePoint Server Linen Typhoon5 min read
Microsoft Issues Out-of-Band SharePoint Patch
May 26
Check Point Research Exploited Claude Code ai-ml15 min read
AI Threat Landscape Digest March-April 2026
May 25
Check Point Research Exploited Kali365 ShinyHunters6 min read
25th May – Threat Intelligence Report
May 25
Mandiant Incident KnowledgeDeliver unknown threat actor8 min read
Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability
May 22
Rapid7 Blog PoC Cisco Catalyst SD-WAN Controller auth-bypass7 min read
Metasploit Wrap Up 05/22/2026
May 22
Bishop Fox Patch PAN-OS auth-bypass11 min read
Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass
May 22
Kaspersky Securelist Exploited VBCloud Cloud Atlas32 min read
Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload
May 22
Bishop Fox Research Strapi auth-bypass21 min read
CVE-2026-27886: Unauthenticated Boolean-Oracle Exfiltration of Administrator Secrets in Strapi
May 20
Qualys Security Blog PoC Linux kernel privilege-escalation10 min read
CVE-2026-46333: Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel ptrace Path
May 20
Kaspersky Securelist Research ExifTool (macOS) rce11 min read
How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)
May 20
ESET WeLiveSecurity Exploited Webworm malware27 min read
Webworm: New burrowing techniques
May 19
Cisco Talos Exploited TP-Link Archer AX53 rce5 min read
TP-Link, Photoshop, OpenVPN, Norton VPN vulnerabilities
May 18
Check Point Research Exploited Lapsus$ ransomware6 min read
18th May – Threat Intelligence Report
May 18
Kaspersky Securelist Exploited Kaspersky products Interlock15 min read
IT threat evolution in Q1 2026. Non-mobile statistics
May 18
Dark Reading Roundup data-breach38 min read
Boulevard of Broken Dreams: 2 Decades of Cyber Fails
May 15
Rapid7 Blog PoC Metasploit Framework rce5 min read
Metasploit Wrap-Up 05/15/2026
May 14
Rapid7 Blog Advisory PAN-OS HacktronAI5 min read