SonicWall SMA1000 flaws exploited as zero-days to push custom malware

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors ...
Tech Times on MSN

FortiSandbox exploited in wild: Patch by Sunday or trust chain collapses

FortiSandbox vulnerability exploits allow unauthenticated root access to the appliance that issues security verdicts across ...

Microsoft patches record 570 Windows security bugs with two exploited zero days - update now

The July Patch Tuesday Windows update breaks the record for the most security bugs fixed in a single month, with three ...

Critical ServiceNow code execution flaw now exploited in attacks

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat ...
The Hacker News

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

SonicWall says attackers are exploiting two SMA 1000 zero-days, including a code injection flaw that could enable ...
SecurityWeek

Organizations Warned of Exploited Joomla Extension Vulnerabilities

Hackers have been exploiting critical vulnerabilities in the Balbooa Forms and iCagenda Joomla extensions for code execution.
Windows Report

CISA Flags Three Actively Exploited Microsoft SharePoint Flaws as New Risks Emerge

CISA warns of active SharePoint attacks exploiting three critical flaws and urges organizations to patch, harden servers, and ...
Forbes

New Google Chrome 149 Update Patches Exploited Zero-Day

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. A week after the Google Chrome web browser was patched alongside a confirmation of the most ...

Check Point Warning: Actively Exploited VPN Zero-Day Linked to Qilin Ransomware

Check Point says VPN zero-day CVE-2026-50751 was exploited by a Qilin-linked actor, prompting emergency hotfixes and a CISA patch deadline.