Critical vulnerability disclosures, zero-days, and security patches.
A critical zero-day vulnerability in Cisco IOS XE software is being actively exploited, with security researchers identifying over 40,000 compromised devices worldwide.
Microsoft's May 2026 Patch Tuesday addresses 78 security vulnerabilities, with three zero-days confirmed to be under active exploitation in the wild.
Google has released an emergency security update for Chrome after discovering active exploitation of a critical type confusion vulnerability in the V8 JavaScript engine.
A critical vulnerability in Kubernetes allows attackers to escape container boundaries and gain control of entire clusters, affecting all versions prior to the latest patches.
CISA has issued an emergency directive requiring federal agencies to patch or mitigate a critical Microsoft Exchange vulnerability within 48 hours.
Cloudflare disclosed it absorbed a 3.8 Tbps volumetric DDoS attack against a financial services customer, the largest publicly reported flood to date.
The Clop ransomware crew is mass-exploiting a SQL injection zero-day in Progress Software's MOVEit Transfer to steal data from hundreds of organizations including the BBC, British Airways, and U.S. federal agencies.
A critical remote-code-execution flaw in the widely used Log4j Java logging library is being mass-exploited within hours of public disclosure, prompting CISA to call it 'one of the most serious' vulnerabilities in its career.