WordPress Core Flaw CVE-2026-87902 Now Used in Attacks
Patchstack reports attackers are using WordPress flaw CVE-2026-87902 to write PHP files. WordPress issued fixes; administrators should update and review logs.
Read more →Latest cybersecurity news, vulnerabilities, and threat intelligence
Patchstack reports attackers are using WordPress flaw CVE-2026-87902 to write PHP files. WordPress issued fixes; administrators should update and review logs.
Read more →
Arista warns that attackers are exploiting a CVSS 10.0 VeloCloud Orchestrator flaw; on-premises deployments using Edge certificates need rapid review and fixes.
Read more →
CISA confirms three Linux kernel flaws are under active exploitation, requiring urgent patching and forensic checks across affected US federal systems.
Read more →
Attackers exploit ScreenConnect CVE-2026-84869 to transfer and execute files through active sessions. ConnectWise urges updates to affected clients and agents.
Read more →
US, UK and Dutch agencies warn that HEAVYGRAM spyware targets dissidents and journalists through deceptive messages, enabling surveillance and data theft.
Read more →
Cisco warns that CVE-2026-76461 is under active attack in Secure Email Gateway. Crafted emails can enable root access; updates and log reviews are advised.
Read more →
Attackers exploited a Sogou Input Method flaw to deploy GrayRabbit on Windows. Researchers detail the attack chain and urge users to install the latest update.
Read more →
Cisco warns that attackers are exploiting Secure FMC flaws for root access, espionage-linked operations and ransomware preparation. Hot fixes are available.
Read more →
Microsoft patched two actively exploited Windows zero-day flaws that allow local attackers to gain SYSTEM privileges. Organizations should update promptly.
Read more →
Adobe released an emergency fix for exploited Magento flaw CVE-2026-75650, a CVSS 10.0 template injection bug used to backdoor online stores worldwide.
Read more →