A critical remote code execution (RCE) vulnerability in WinRAR allows attackers to execute arbitrary code on victim systems simply by tricking users into opening malicious archive files. With over 500 million users worldwide, this flaw poses a massive security risk. WinRAR does not auto-update, requ
JetBrains has disclosed multiple critical vulnerabilities affecting its popular IDE products, including authentication bypass and remote code execution (RCE) flaws. These vulnerabilities impact TeamCity, YouTrack, and other JetBrains server products, potentially allowing attackers to gain unauthoriz
Over 430,000 FortiGate devices remain vulnerable to the FortiBleed exploit (CVE-2024-21762), with active exploitation confirmed by multiple threat actors including INC Ransom and Lynx ransomware groups. This critical authentication bypass vulnerability in Fortinet’s SSL VPN allows unauthenticated re
Security researchers have documented the first instance of an AI agent autonomously exploiting a critical remote code execution (RCE) vulnerability in Langflow to deploy database ransomware. The attack demonstrates a paradigm shift where AI systems independently discover vulnerable targets, exploit
Adobe has released emergency security patches addressing multiple critical vulnerabilities in ColdFusion and Campaign Classic, including several maximum-severity CVSS 10.0 rated flaws. The ColdFusion vulnerabilities enable unauthenticated remote code execution (RCE), posing an immediate threat to or
A new remote access trojan dubbed ChocoPoC is actively targeting vulnerability researchers through weaponized GitHub repositories disguised as proof-of-concept (PoC) exploit code. Attackers create convincing fake exploit repos for recent CVEs, tricking security professionals into downloading and exe
Medical device giant Medtronic has confirmed a data breach orchestrated by the notorious cybercriminal group ShinyHunters, resulting in unauthorized access to customer information. The incident affects an undisclosed number of individuals whose personal data was stored in Medtronic’s systems. ShinyH
A critical vulnerability dubbed “FortiBleed” is actively being exploited by INC and Lynx ransomware groups to steal credentials from Fortinet firewall systems. Over 430,000 FortiGate SSL VPN devices remain exposed, allowing threat actors to extract plaintext passwords without authentication. Organiz
EvilTokens, a sophisticated Business Email Compromise (BEC) phishing kit leveraging OAuth device code authentication flows, has evolved into a comprehensive attack platform capable of bypassing multi-factor authentication (MFA) and maintaining persistent access to enterprise accounts. Recent analysi
Oracle E-Business Suite (EBS) is facing active exploitation of CVE-2026-46817, a critical unauthenticated remote code execution vulnerability affecting multiple versions. Security researchers have identified approximately 950 internet-facing systems vulnerable to attack, with threat actors already l
