SAP Commerce Cloud CVE-2026-58231 Targeted in Attacks
Exploitation attempts now target CVE-2026-58231, a CVSS 10 SAP Commerce Cloud flaw allowing unauthenticated remote code execution. Patch systems immediately.
Read more →Latest cybersecurity news, vulnerabilities, and threat intelligence
Exploitation attempts now target CVE-2026-58231, a CVSS 10 SAP Commerce Cloud flaw allowing unauthenticated remote code execution. Patch systems immediately.
Read more →
Attackers are exploiting VMware vCenter flaw CVE-2026-59310 to deploy reverse SSH access, with more than 360 victim IPs observed across 47 countries worldwide.
Read more →
Attackers are testing SharePoint CVE-2026-55040 after a public PoC exposed a critical authentication bypass. Microsoft patches are available right now.
Read more →
Zoom patched three annotation flaws that could enable remote code execution or denial of service across Workplace, Rooms, VDI and Meeting SDK clients.
Read more →
Storm-1175 is deploying new StormEncryptor ransomware as investigators assess a possible link to actively exploited N-able N-central security flaws today.
Read more →
OpenAI paused some Astra work after early tests could not rule out critical cyber capability, prompting stricter isolation, monitoring and external review.
Read more →
Metabase confirms active exploitation of a critical zero-day SQL injection flaw that gives remote attackers administrator access. Self-hosted users must patch.
Read more →
Rapid7 details critical TeamCity flaw CVE-2026-63077, which lets unauthenticated attackers run commands on exposed on-premises CI/CD servers worldwide.
Read more →
Zero-click prompt injection tests hijacked agentic AI browsers, exposing authenticated sessions to phishing, data theft and unauthorized account actions.
Read more →
CISA adds exploited Langflow, N-central and Tomcat flaws to its KEV catalog, giving federal agencies until August 7 to apply vendor mitigations.
Read more →