Cisco has issued an urgent warning about an actively exploited zero-day vulnerability in its SD-WAN vManage software that allows unauthenticated attackers to execute arbitrary code remotely. The flaw, affecting multiple versions of vManage, is being weaponized in the wild before patches are availabl
OWASP has launched CVE Lite CLI, a lightweight command-line vulnerability scanner designed to help developers quickly identify known vulnerabilities in their project dependencies. This open-source tool provides fast, offline-capable CVE scanning without the overhead of enterprise solutions, making s
CISA adds critical Cisco SD-WAN flaw to KEV catalog. CVE-2026-20182 scores perfect 10.0 on CVSS scale. Federal agencies have limited time to patch.
The U.S. Department of Defense has officially acknowledged that commercially available location data from smartphones and connected devices poses a significant operational security risk to military personnel and missions. This admission validates long-standing concerns about how adversaries can expl
Over 430,000 FortiGate devices remain vulnerable to the FortiBleed exploit (CVE-2024-21762), with active exploitation confirmed by multiple threat actors including INC Ransom and Lynx ransomware groups. This critical authentication bypass vulnerability in Fortinet’s SSL VPN allows unauthenticated re
A counterfeit Perplexity AI Chrome extension was discovered intercepting user search queries and address bar inputs, redirecting traffic through attacker-controlled domains. The malicious extension mimicked the legitimate Perplexity AI service, exploiting user trust to harvest browsing data and pote
Apple’s upcoming iOS 27 introduces an automatic password change feature that detects compromised credentials and replaces them without user intervention. This system leverages Apple’s Password Manager integration with known breach databases to identify at-risk accounts and securely generate new pass
Microsoft has identified CryptoBandits, a new USB-propagating malware strain that hijacks cryptocurrency transactions by replacing wallet addresses in the clipboard. The malware uses Tor for command-and-control communications, spreads via infected USB drives, and has already compromised systems acro
Google has released an emergency security update for Chrome, addressing CVE-2026-XXXXX, the fifth zero-day vulnerability exploited in the wild this year. The high-severity flaw affects the V8 JavaScript engine and allows remote attackers to execute arbitrary code through specially crafted web pages.
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These campaigns leverage YouTube tutorials, TikTok videos, and Instagram posts promising free account upgrades, but instead deliver sophisticated inf