Splunk has disclosed a critical vulnerability in Splunk Enterprise that allows unauthenticated attackers to execute operating ...

Progress disclosed a critical command injection flaw that lets malicious OpenAPI or Swagger documents execute OS commands.

Nozomi reports that Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT ...

SonicWall fixed four SMA1000 flaws, including a 10.0-rated SSRF reachable before authentication; it says none are known to be ...

Exploitation of CVE-2026-73570, an unauthenticated OS command injection in Zimbra, started shortly after patches rolled out.

An agent for you, an agent for me.

AWS has released fixes for four security vulnerabilities affecting its open-source Loom AI agent orchestration platform and ...

CVE-2026-102255 could allow remote unauthenticated attackers to direct a SMA 1000 appliance to issue requests on their behalf ...

SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal ...

SonicWall has issued security updates to address four vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances.

AI is having a double impact in 2026, contributing to the rapid rise in vulnerability discovery and a concurrent surge in exploits crafted against known flaws.

SonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 Series appliances, including a critical server-side request forgery (SSRF) flaw with a maximum CVSS score of 10.0.