22 minutes from PoC exploit to attacks—would you have patched in time?
The speed at which you need to apply patches is increasing. Are you prepared?
2 minutes
Exploits and vulnerabilities
GeoServer vulnerability actively abused, CISA warns
CISA has added CVE-2024-36401 to its catalog of known exploited vulnerabilities.
2 minutes
Patch now! July Patch Tuesday fixes two actively exploited vulnerabilities
Microsoft's Patch Tuesday covers two actively exploited vulnerabilities, one Office Remote Code Execution (RCE) flaw, and many other CVEs
2 minutes
Patch, but don’t be scared! OpenSSH bug is back from the dead
A vulnerability from 2006 has come back to life to haunt installations of the widely-used secure shell.
2 minutes
Cisco warns about actively exploited vulnerability in switches
A vulnerability in routers that could allow a local authenticated attacker to execute arbitrary commands as root is reportedly under…
2 minutes
UEFI vulnerability for Intel processors opens the doors for a bootkit
Researchers have disclosed details of a vulnerability in Phoenix Technologies' firmware for Intel processors.
2 minutes
Why are browser vulnerabilities going unpatched?
Last week, the top five unpatched vulnerabilities were all browser-based, some from 2023.
3 minutes
Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities
Microsoft has fixed 149 vulnerabilities, two of which are reportedly being exploited in the wild.
2 minutes
Update now! ConnectWise ScreenConnect vulnerability needs your attention
ConnectWise customers need to take immediate action to remediate a critical vulnerability.
1 minute
Microsoft Exchange vulnerability actively exploited
One of Microsoft's Patch Tuesday fixes has flipped from "Likely to be Exploited" to “Exploitation Detected”.
1 minute
Update now! Microsoft fixes two zero-days on February Patch Tuesday
Microsoft has issued patches for 73 security vulnerabilities in its February 2024 Patch Tuesday.
2 minutes
Patch now! Roundcube mail servers are being actively exploited
A vulnerability in Roundcube webmail is being actively exploited and CISA is urging users to install an updated version.
1 minute
Ivanti urges customers to patch yet another critical vulnerability
Ivanti has found yet another vulnerability in versions of Connect Secure, Policy Secure, and ZTA gateways.
2 minutes
CISA: Disconnect vulnerable Ivanti products TODAY
CISA has ordered all FCEB agencies to disconnect all instances of Ivanti Connect Secure and Ivanti Policy Secure solution products.
2 minutes
Patch now! Fortra GoAnywhere MFT vulnerability exploit available
A new vulnerability in Fortra GoAnywhere MFT now has exploit code available that allows an attacker to create a new…
2 minutes
CISA urges urgent patching of two actively exploited Citrix NetScaler vulnerabilities
CISA has added two Citrix NetScaler vulnerabilities to its vulnerability catalog, with a very short deadline to patch.
2 minutes
Ivanti vulnerabilities now actively exploited in massive numbers
Two vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure Gateways are subject to massive exploitation despite an available workaround.
1 minute
Joomla! vulnerability is being actively exploited
A vulnerability in the popular Joomla! CMS has been added to CISA's known exploited vulnerabilities catalog.
2 minutes
Act now! Ivanti vulnerabilities are being actively exploited
Several international security agencies are echoing a warning by Ivanti about actively exploited vulnerabilities in its VPN solution.
2 minutes
Cybercrime Has Gone Machine-Scale
AI is automating malware faster than security can adapt.
Get the facts Read the 2026 State of Malware