Vulnerabilities & Patches
CVEs, zero-days, vendor patch advisories, exploit research and proof-of-concept disclosures.
-
VulnerabilitiesChinese Hackers Exploited Dell RecoverPoint Zero-Day Flaw for 18 Months
For the past 18 months, a Chinese cyberespionage group has been taking advantage of a…
-
VulnerabilitiesHackers leverage Ivanti EPMM zero-days to hijack MDM servers
Attackers are actively exploiting two critical zero-day vulnerabilities in Ivanti’s…
-
VulnerabilitiesVMware Patches Command Injection Vulnerability in Aria Operations
VMware has issued patches addressing several high- and medium-risk vulnerabilities in its…
-
VulnerabilitiesNew Serv-U vulnerabilities continue SolarWinds' trend of critical disclosures
SolarWinds is facing significant security challenges, particularly with its Serv-U…
-
VulnerabilitiesFive Eyes release urgent warning on Cisco SD-WAN zero-day vulnerability exploitation
Cybersecurity agencies within the Five Eyes alliance have issued an urgent directive…
-
VulnerabilitiesYour OpenClaw agent might be receiving commands from harmful websites
Researchers at Oasis Security have disclosed a flaw chain that allowed a malicious…
-
VulnerabilitiesCisco SD-WAN Zero-Day Exploited for Three Years
Cisco announced today that a critical zero-day vulnerability in its Catalyst SD-WAN…
-
VulnerabilitiesFlaw in Google's Gemini AI Panel Allows Potential Hijacking
Google has addressed a significant vulnerability in its Gemini AI feature within the…
-
VulnerabilitiesOpenClaw Flaw Highlights AI Agent Vulnerabilities
A recently uncovered vulnerability in OpenClaw, an open-source AI agent that has rapidly…
-
VulnerabilitiesTargeted Android Attacks Exploit Qualcomm Zero-Day Vulnerability
A recent vulnerability in Qualcomm's software has been exploited in targeted attacks…
-
VulnerabilitiesVulnerabilities in Claude’s software could compromise developers’ systems.
Three significant security vulnerabilities have been identified in Anthropic’s AI-powered…
-
VulnerabilitiesUK Service Reduces Unresolved Security Flaws by 75% Through Vulnerability Monitoring
The UK government has announced significant advancements in its cybersecurity efforts…
-
VulnerabilitiesClawJacked Exploit Allows Secret AI Agent Takeover
OpenClaw users are being urged to upgrade to the latest version of the tool following a…
-
VulnerabilitiesMarch 2026 Android security update addresses 100+ vulnerabilities, including one actively exploited
The March 2026 security patch for Android addresses a wide range of vulnerabilities…
-
VulnerabilitiesCoruna: Advanced iOS exploit kit fueling financial crime
A potent iOS exploit kit has been identified by Google’s Threat Intelligence Group (GTIG)…
-
VulnerabilitiesThe Flaw That Makes Your AI Agent Betray You
Zenity Labs has revealed PleaseFix, a series of critical vulnerabilities that impact…
-
VulnerabilitiesOpenClaw Flaw Let Websites Take Over AI Agents
A recent report from Oasis Security reveals a vulnerability in the OpenClaw AI assistant…
-
VulnerabilitiesChrome's Gemini Live AI Assistant Vulnerable to Hijacking
A recent report by Palo Alto Networks highlights a significant vulnerability in the…
-
VulnerabilitiesScientists Discover Technique to Monitor Cars Using Tire Sensors
Data transmissions from tire pressure sensors can be intercepted using inexpensive…
-
VulnerabilitiesMS-Agent AI Framework Flaw Could Lead to Complete System Compromise
A vulnerability in the ModelScope MS-Agent framework poses a risk by allowing the…
-
VulnerabilitiesAndroid Update Fixes Exploited Qualcomm Zero-Day Vulnerability
On Monday, Google announced the deployment of new security updates for Android, which…
-
VulnerabilitiesNew 'AirSnitch' Attack Reveals Wi-Fi Client Isolation May Offer False Security
A team of researchers from UC Riverside has developed attacks capable of bypassing client…
-
VulnerabilitiesHoneywell and Researcher Dispute Building Controller Vulnerability Impact
A researcher has identified a potentially serious vulnerability in a Honeywell building…
-
VulnerabilitiesVMware Aria Operations Flaw Actively Exploited
A vulnerability recently fixed in VMware Aria Operations, formerly known as vRealize…
-
VulnerabilitiesSevere FreeScout Flaw Results in Complete Server Breach
A critical vulnerability in the open-source help desk and shared mailbox solution…