Beat
Vulnerabilities
Zero-days, patches and the bugs attackers are actually exploiting.
- 39
- stories
- OCT 20
- latest
All Vulnerabilities · page 2
Fortinet CVE-2026-35616 Actively Exploited
The company published an advisory on Saturday and urged all customers who are running affected versions of the software to install the hotfix as quickly as possible. The bug affects versions 7.4.5 and 7.4.6 of FortiClient EMS.
Dennis Fisher · 1 min
Researchers Warn of ‘Widespread’ Ivanti EPMM Exploitation
Exploitation of CVE-2026-1281 and CVE-2026-1340 is “widespread and mostly automated,” according to Unit 42 researchers.
Decipher · 2 min
Chinese Actors Exploited Dell RecoverPoint for VMs Flaw Since 2024
The hardcoded credential vulnerability (CVE-2026-22769) exists in Dell RecoverPoint for Virtual Machines and has been exploited since mid-2024.
Decipher · 2 min
Apple Patches iOS Zero Day CVE-2026-20700
That vulnerability also was patched in macOS, but the active exploitation that Apple disclosed was against iOS only.
Dennis Fisher · 1 min
Microsoft Fixes Six Exploited Bugs in February Patch Tuesday Updates
The exploited vulnerabilities in question exist across various products, from Microsoft Word to Windows Shell.
Decipher · 3 min
Ivanti Discloses Exploited Critical EPMM Flaws
The vulnerabilities (CVE-2026-1281 and CVE-2026-1340) could lead to unauthenticated remote code execution if successfully exploited.
Decipher · 2 min
Fortinet Warns of Critical Flaw After FortiCloud SSO Exploitation
Fortinet is rolling out updates for CVE-2026-24858, with fixes for some versions available as of Tuesday, and others in releases that are upcoming at an unspecified date.
Decipher · 2 min
Microsoft Releases Emergency Patch for CVE-2026-21509
The vulnerability (CVE-2026-21509) requires user interaction for an attack to succeed, with the most likely vector being an attacker sending a malicious Office file to a victim, who then opens it.
Dennis Fisher · 1 minCisco Fixes Unified Communications RCE Flaw Under Attack
Threat actors are attempting to exploit the Cisco remote code execution flaw (CVE-2026-20045) in the wild, according to a new security advisory.
Decipher · 2 minReact2Shell Attacks Continue to Build
After a peak of more than 430,000 attack sessions in late December, daily volumes targeting React2Shell have stabilized in the 300,000 to 400,000 range.
Dennis Fisher · 1 min
IBM Warns of Critical Auth Bypass Bug in API Connect
IBM published updates for the affected versions of API Connect on Jan. 2., and urged organizations to update affected versions as soon as possible.
Dennis Fisher · 1 min
Serious MongoDB Flaw CVE-2025-14847 Under Exploitation
MongoDB disclosed the vulnerability (CVE-2025-14847) on Dec. 19 and a few days later, a public exploit for it appeared online.
Dennis Fisher · 1 minCritical Flaw CVE-2025-55182 Affects React Server Components
All developers using React Server Components are urged to upgrade immediately, and some apps that don’t include React Server Function endpoints could be vulnerable, as well.
Dennis Fisher · 2 minFortinet CVE-2025-64446 Under Active Attack
That vulnerability (CVE-2025-64446) affects several versions of FortiWeb and CISA has added it to its Known Exploited Vulnerabilities catalog.
Dennis Fisher · 2 min
Microsoft Warns of Exploited Windows Kernel Zero-Day
The important-severity flaw (CVE-2025-62215) has been exploited, said Microsoft.
Lindsey O'Donnell-Welch · 2 min
Microsoft Fixes Actively Exploited Flaws in Patch Tuesday Release
Microsoft issued fixes for several actively exploited vulnerabilities in its latest patch Tuesday release.
Lindsey O'Donnell-Welch · 2 min
Oracle Warns of E-Business Suite Bug
A Saturday advisory from Oracle’s CISO warned of a vulnerability impacting some deployments of E-Business Suite (CVE-2025-61884).
Lindsey O'Donnell-Welch · 1 min
Data Connects Scanning Surges for Cisco, Fortinet, PAN Devices
Researchers say that all three campaigns are being driven at least in part by one threat actor.
Dennis Fisher · 1 minAttackers Exploit Critical GoAnywhere Bug to Spread Medusa Ransomware
A critical GoAnywhere flaw (CVE-2025-10035) is being targeted in attacks by a threat group known for deploying Medusa ransomware.
Lindsey O'Donnell-Welch · 2 min