SecurityWeek

Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability

Cisco confirmed that hackers are exploiting CVE-2026-20230, a Unified CM vulnerability allowing privilege escalation to root.
SecurityWeek

CISA Warns of Actively Exploited Microsoft SharePoint Vulnerability

CISA warns that attackers are exploiting Microsoft SharePoint vulnerability CVE-2026-45659, a high-severity remote code ...
CSO Online

Hackers exploit critical PTC Windchill PLM software flaw

The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put ...
Dark Reading

Nightmare-Eclipse Drops Yet Another Microsoft Exploit, RoguePlanet

The zero-day "nightmare" apparently isn't over for Microsoft, as a disgruntled researcher who's been feuding with the company for the past three months has dropped yet another proof-of-concept (PoC) ...
Infosecurity Magazine

Cisco Vulnerability Exploited Months Before Disclosure, Google Warns

A threat actor started exploiting a severe vulnerability in Cisco products at least two months before the flaw was disclosed, ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Three AirDrop vulnerabilities discovered, with Apple working on a full fix

Three AirDrop vulnerabilities have been discovered by security researchers, affecting both iPhone and Mac, with similar ones ...
Ars Technica

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft ...
Security

Verizon’s 2025 DBIR Reveals Vulnerability Exploits Are Driving a Surge in Data Breaches

Verizon Business released its 2025 Data Breach Investigations Report (DBIR), which reveals a significant increase in cyberattacks. The report found that third-party involvement in breaches has doubled ...
Bleeping Computer

CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today that hackers are now actively exploiting a recently patched high-severity SolarWinds Serv-U flaw to crash servers. Serv-U ...
PC World

Microsoft patches a record 206 flaws—and one is already being exploited

PCWorld reports Microsoft patched a record 206 security flaws in June 2024, including 19 critical remote code execution vulnerabilities affecting Windows kernel and HTTP services. One vulnerability in ...
Krebs on Security

A Record-Breaking Patch Tuesday for June 2026

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company’s monthly Patch ...