Cl0p Targets Windchill: More Than 40 Organizations Exposed to a Critical Vulnerability
Cl0p has published the names of more than 40 organizations it claims to have compromised by exploiting CVE-2026-12569 , a critical vulnerability in PTC’s
Vulnerabilities
More news
Page 28 / 39 · 343 articles
StopAndProtect: The Ransomware Campaign Turning Nearly 2,000 WordPress Sites into Criminal Infrastructure
Check Point reveals StopAndProtect campaign compromises nearly 2,000 WordPress sites into a botnet for data theft and ransomware distribution.
Four Critical Vulnerabilities Exploited Against macOS, SharePoint, VMware vCenter, and Windows
CISA has added four actively exploited critical vulnerabilities to its Known Exploited Vulnerabilities KEV catalog. The flaws affect Apple macOS,
MLflow and FUXA Under Attack: Critical AI and Industrial Automation Flaws Exploited
Critical flaws in MLflow and FUXA are being exploited, posing risks to AI and industrial automation. Learn about CVEs and mitigation strategies.
Six Vulnerabilities Affect CISA Malcolm: Risk of Arbitrary Code Execution and Service Disruption
CISA discloses six vulnerabilities in Malcolm suite, risking arbitrary code execution and service disruption. Fixes available in recent versions.
Apple Updates macOS, iOS, and iPadOS: Dozens of WebKit, Kernel, and Networking Flaws Fixed
Apple patches critical flaws in macOS, iOS, iPadOS addressing WebKit, kernel, and networking issues to prevent crashes and data leaks.
GitLab Fixes Critical GraphQL Flaw That Could Modify or Delete Projects
GitLab patches critical GraphQL vulnerability CVE-2026-19478 that could let attackers modify or delete projects. Upgrade self-managed instances immediately.
Two Critical WordPress Plugin Vulnerabilities Could Lead to Full Site Takeover
Two critical vulnerabilities have been reported in widely used WordPress plugins. The first affects Forminator Forms , installed on more than 600,000
Unisoc Modems: A VoLTE Attack Chain Can Reach the Android Kernel
Discover how a Unisoc modem vulnerability allows attackers to gain Android kernel access through a VoLTE video call. Affects chipsets like T606, T612, T7250.