Apple backports fixes for CVE-2026-86950 to older iPhones and iPads after reports of possible targeted exploitation of the ...

CISA added CVE-2026-41709 to its KEV catalog after Warp Panda exploited the VMware ESX logging flaw in attacks targeting the ...

Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense ...

CISA added two actively exploited PHP2Shell vulnerabilities to its KEV catalog for enabling unauthenticated remote code ...

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.

Apple’s security-releases page now lists iOS 18.7.11 and iPadOS 18.7.11, dated October 26, 2026, and the entry that matters ...

NIST has introduced a new way to estimate which software vulnerabilities have likely been exploited, and it’s calling on the cybersecurity community to help improve and validate the method. The new ...

A Windows zero-day vulnerability recently patched by Microsoft was exploited by hackers working on behalf of the North Korean government so they could install custom malware that’s exceptionally ...

A total of 768 CVEs were publicly reported as exploited in the wild for the first time in 2024, according to new data by VulnCheck. This represents a 20% increase compared to 2023, when 639 CVEs were ...

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of ...