Security Threats

Threats Incidents Live News

Start with an app, service or company you use. Unsure what runs your website or work device? Ask your host or IT team for the product name and version. Search covers threats, incidents and news.

September 10, 2026 1 threat

JFrog Artifactory Improper Authentication Vulnerability

September 9, 2026 2 threats

KGUARD_firmware: Initialization of a Resource with an Insecure Default

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

September 8, 2026 1 threat

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

September 6, 2026 1 threat

N-central flaw lets attackers run code with no login

September 5, 2026 3 threats

RouterOS 7.24.2 (2)

MikroTik RouterOS bandwidth-test bug can crash routers

MikroTik RouterOS SSH bug can let attackers hijack admin accounts

MikroTik RouterOS SSH flaw can grant administrator access

September 4, 2026 1 threat

UAT-8302 and its box full of malware

September 2, 2026 3 threats

Switchvox SMB phones can be hijacked

Encode has a security flaw

LiteLLM security bug can let attackers bypass login

September 1, 2026 1 threat

Windows 11 zero-day lets attackers crash your PC

August 28, 2026 2 threats

JFrog Artifactory flaw can hand out admin access

PaperCut NG/MF Unsafe Reflection Vulnerability

August 27, 2026 3 threats

JFrog Artifactory bug lets users write files outside cache

PaperCut print software zero-day under attack

Linux kernel bug lets local users become root

August 26, 2026 1 threat

Microsoft SQL Server zero-day lets attackers run code

August 24, 2026 1 threat

Zimbra email servers need urgent patching

August 20, 2026 6 threats

Microsoft Entra ID bug can let attackers run code remotely

Libuser bug can crash services

ABRT crash-report tool bug lets local users gain privileges

Ajaxpro.2_project zero-day lets attackers run code

Linux Kernel Out-of-bounds Write

Zimbra Collaboration Suite zero-day under attack

August 17, 2026 2 threats

MLflow webhook bug can let attackers spy on your servers

Ray Project code injection bug can let attackers run commands

August 15, 2026 1 threat

GeoServer 0-Day Vulnerability Enables Remote Code Execution Attacks

August 14, 2026 1 threat

Ray AI framework flaw lets browsers trigger code execution

August 12, 2026 3 threats

TrueConf (2)

TrueConf Server sandbox escape lets attacker take over server

TrueConf server bug can let attackers run remote code

SharePoint bug let attackers log in as any user

August 11, 2026 2 threats

Windows 10 bug can let attackers gain admin control

Cisco firewall bug can reload devices remotely

August 10, 2026 1 threat

VMware vCenter bug can let attackers run code

August 8, 2026 1 threat

Metabase flaw gives attackers administrator access

August 7, 2026 2 threats

MacOS Screen Sharing bug skips the password check

Progress bug can run code

August 5, 2026 1 threat

TeamCity flaw lets outsiders run code with no login

August 4, 2026 1 threat

IBM Langflow bug can let attackers run host commands

August 3, 2026 1 threat

SonicWall SMA 1000 zero-days gave attackers root access

August 2, 2026 1 threat

N-able N-central login bypass under active attack

August 1, 2026 1 threat

N-able N-central bug can let attackers skip login

July 30, 2026 2 threats

Apache Tomcat leaks passwords and tokens

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

July 29, 2026 2 threats

Minnesota water systems hit by PLC cyberattacks

Cisco FMC Software has a weak password

July 27, 2026 3 threats

VeloCloud Orchestrator (2)

Arista VeloCloud Orchestrator zero-day lets attackers run commands

VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild

Fortinet FortiOS flaw can expose sensitive information

July 23, 2026 4 threats

Zimbra Collaboration Suite (2)

Zimbra flaw can expose email and account data

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Zimbra bug can expose secrets

Check Point SmartConsole zero-day lets attackers bypass login

July 21, 2026 2 threats

Langflow bug lets anyone run code as root

DD-WRT bug can take over routers

July 20, 2026 1 threat

Microsoft SharePoint bug can let attackers run code remotely

July 19, 2026 1 threat

Improper Authentication

July 17, 2026 1 threat

WordPress sites can be hijacked remotely

July 16, 2026 2 threats

FortiSandbox bug can run commands remotely

FortiSandbox bug can let attackers run commands

July 15, 2026 2 threats

KNX smart-home systems can be locked by attackers

Oracle E-Business Suite file transfer flaw under attack

July 14, 2026 6 threats

Active Directory Federation Services (2)

Microsoft July 2026 fixes two exploited flaws

AD FS flaw lets insiders steal signing keys

SonicWall SMA1000 (2)

SonicWall SMA1000 appliances let admins run commands

SonicWall SMA1000 bug can let attackers redirect appliance requests

Critical SharePoint bug can let attackers run code remotely

SharePoint Server flaw let attackers skip login

July 13, 2026 1 threat

Cisco 871 router web admin open to forged commands

July 10, 2026 2 threats

Joomla Balbooa Forms lets attackers upload malicious files

icagenda has a security flaw

July 8, 2026 2 threats

SharePoint bug can let attackers run code on servers

WinRAR flaw plants a hidden startup backdoor on Windows

July 7, 2026 4 threats

Joomla Page Builder CK flaw allows full site takeover

ColdFusion code bug can let attackers run commands

Joomla SP Page Builder plugin lets attackers run code

Langflow lets users run other users' private workflows

July 1, 2026 1 threat

SharePoint bug can let attackers run code

Load more threats

CISA KEV170923m ago

VulnCheck KEV20023m ago

NVD150823m ago

WPScan0never

HIBP8023m ago

URLhaus6023m ago

GitHub Advisory12023m ago

OSV.dev323m ago

ransomware.live8023m ago

Microsoft MSRC20023m ago

CISA Advisory3023m ago

Exploit-DB4023m ago

BleepingComputer1123m ago

KrebsOnSecurity123m ago

TheHackerNews2423m ago

SecurityWeek523m ago

SecurityAffairs723m ago

VPNCentral023m ago

SC World123m ago

eSecurityPlanet923m ago

DarkReading1323m ago

SchneierOnSecurity123m ago

ThreatFox8023m ago

MalwareBazaar1023m ago

Chrome Releases423m ago

Apple Security023m ago

Mozilla MFSA3023m ago

Adobe PSIRT3023m ago

AlienVault OTX3223m ago

Pulsedive123m ago

SANS ISC323m ago

Cisco Talos423m ago

Unit 42323m ago

Mandiant02mo ago

Microsoft Threat Intelligence523m ago

Patchstack1523m ago

Rapid7623m ago

CERT/CC1023m ago

Openwall oss-security8023m ago

Wordfence723m ago

Socket1023m ago

SafeDep523m ago

Sonatype323m ago

Snyk023m ago

StepSecurity123m ago

Oracle Security Alerts723m ago

GitLab Security Releases623m ago

Palo Alto PSIRT1123m ago

Veeam Security Advisories623m ago

Plesk Support1123m ago

ConnectWise Security Bulletins423m ago

Cisco PSIRT923m ago

CERT-FR Advisories3923m ago

CERT-FR Alerts223m ago

CERT-EU Advisories223m ago

CERT-Bund Advisories5023m ago

INCIBE Advisories1023m ago

ACN CSIRT Italy4623m ago

Jenkins Advisories123m ago

Drupal Advisories323m ago

FreeBSD Advisories1023m ago

Gentoo Advisories3423m ago

QNAP Advisories023m ago

Synology Advisories023m ago

Huawei PSIRT CN023m ago

Debian DSA3023m ago

JPCERT/CC623m ago

JVN EN2023m ago

Splunk1723m ago

Node.js223m ago

HashiCorp2323m ago

Joomla2523m ago

Elastic Security2523m ago

JetBrains123m ago

CISA ICS Advisories3023m ago

CISA Medical Advisories223m ago

MS-ISAC923m ago

CCCS Canada5023m ago

CERT-SE223m ago

NCSC UK023m ago

CISA News023m ago

Proofpoint023m ago

Datadog Security Labs023m ago

Recorded Future223m ago

Cyble323m ago

Varonis023m ago

Sygnia123m ago

Vectra AI023m ago

JPCERT Blog023m ago

SOCRadar523m ago

Graham Cluley323m ago

SecurityOnline1323m ago

GBHackers823m ago

Cyber Security News823m ago

Infosecurity Magazine3023m ago

The Cyber Express623m ago

NNS Blog323m ago

elttam123m ago

Intruder Research123m ago

SpaceRaccoon023m ago

Exodus Intelligence423m ago

VoidSec123m ago

Chocapikk423m ago

Exploit Reversing223m ago

Tim Blazytko123m ago

Zellic123m ago

EUVD023m ago

Ubuntu USN4023m ago

Red Hat5023m ago

Zero Day Initiative4023m ago

Fortinet PSIRT723m ago

NeuraCybIntel723m ago