Networking solutions provider Arista Networks on Thursday rolled out patches for an exploited zero-day vulnerability in its centralized management tool VeloCloud Orchestrator (VCO). The critical-severity […]
Tag: vulnerability
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Two days after PHP rolled out emergency fixes for the PHP2Shell vulnerabilities, threat actors have tried to use the flaws to spread a Mirai botnet. […]
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Signal has resolved a critical-severity vulnerability that could allow a malicious caller to keep audio and video tracks enabled even after the user hung up. […]
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
Oracle has released its Critical Patch Update (CPU) for October 2026. The latest updates bring 1,295 new fixes across dozens of products. According to an […]
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
PHP has rolled out patches for two critical-severity vulnerabilities named PHP2Shell that could provide attackers with unauthenticated remote code execution (RCE). The issues are tracked […]
Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks
Siemens revealed on Monday that threat actors have exploited a vulnerability in Siemens Software Center as part of a malware campaign. Siemens Software Center handles […]
Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Drupal has rolled out patches for five vulnerabilities, including two critical-severity bugs that could be exploited for remote code execution (RCE). The first resides in […]
F5, Juniper Networks Patch Critical Vulnerabilities
F5 and Juniper Networks have rolled out patches for dozens of vulnerabilities across their products, including critical-severity remote code execution (RCE) flaws. Security and application […]
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
A Chinese APT has been exploiting a BeyondTrust vulnerability as a zero-day since August as part of its state-sponsored espionage operations. The exploited flaw, tracked […]
Bricksforge WordPress Plugin Vulnerability Manipulated in the Wild
An essential susceptability in the Bricksforge WordPress plugin is being exploited in the wild, according to WordPress safety and security company Patchstack. The susceptability is […]