The CitrixBleed vulnerability (CVE-2023-4966) affecting Citrix NetScaler ADC and Gateway appliances has been actively exploited within 24 hours of public disclosure. This critical session hijacking flaw allows unauthenticated attackers to steal valid session tokens and bypass multifactor authenticat
A critical zero-day vulnerability in Oracle PeopleSoft (CVE-2026-35273) has been actively exploited in the wild, resulting in a confirmed data breach at Nissan. The unauthenticated remote code execution flaw affects PeopleSoft versions 9.2 and earlier, allowing attackers to bypass authentication and
Nissan Motor Corporation disclosed a significant data breach affecting employee information after threat actors exploited a zero-day vulnerability in Oracle PeopleSoft. The automotive giant confirmed that unauthorized access occurred through their HR management system, compromising sensitive employe
Microsoft has announced the extension of hotpatching support for Windows Server 2022 on Azure through 2027, providing organizations with continuous security updates that don’t require system reboots. This extension ensures businesses can maintain operational continuity while staying protected agains
Cisco has confirmed active exploitation of CVE-2026-20245, a critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager that allows unauthenticated remote attackers to gain root-level access. The flaw affects multiple Catalyst SD-WAN Manager versions and is being weaponized in the wild before
ShinyHunters, a notorious data extortion group, has exploited zero-day vulnerabilities to breach multiple organizations. Even if you’ve applied recent patches, your systems may have been compromised during the exposure window. Organizations must immediately conduct forensic assessments to determine
A critical zero-day vulnerability in Cisco systems is being actively exploited by malicious threat actors who have successfully gained the highest level of administrative access at a communications service provider. The exploitation has granted attackers complete control over critical network infras
A critical vulnerability (CVE-2026-42530) has been discovered in NGINX’s HTTP/3 implementation that allows unauthenticated attackers to trigger denial-of-service conditions and potentially achieve remote code execution. The flaw affects NGINX versions 1.25.0 through 1.26.3 with HTTP/3 enabled, stemm
Microsoft has officially confirmed a critical zero-day vulnerability dubbed “RoguePlanet” affecting Microsoft Defender across multiple Windows versions. The flaw allows attackers to bypass real-time protection and execute malicious code without detection. Active exploitation has been observed in the
Microsoft and Adobe have issued a historic combined total of 331 security vulnerabilities in their June 2026 Patch Tuesday release—the largest security update drop ever recorded. Microsoft addressed 208 CVEs affecting Windows, Office, Azure, and other products, including 15 zero-days and 8 actively