CISA Adds Actively Exploited Oracle E-Business Suite Takeover Flaw to KEV
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Oracle E-Business Suite vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, confirming active...
F5 Fixes NGINX Flaws Enabling Code Execution, Memory Leaks and DoS Attacks
F5 has disclosed three security vulnerabilities affecting NGINX Plus and NGINX Open Source, including a critical flaw that could allow remote code execution on...
Microsoft Patches Multiple Windows RDP Flaws That Expose Sensitive Data
Microsoft has addressed five information disclosure vulnerabilities affecting the Windows Remote Desktop Protocol (RDP) in its July 2026 Patch Tuesday release, each carrying an...
Weaponized JPEG Images Could Enable Exploitation of PHP Memory Flaws
A pair of memory-safety bugs lurking inside PHP's image-handling functions, CVE-2025-14177 and an unpatched heap overflow in iptcembed, could allow attackers to leak sensitive server...
Threat Actors Use Hijacked Teams Accounts In ModeloRAT Attacks
Cybercriminals are increasingly weaponizing the trust placed in corporate communication platforms to launch devastating internal attacks.
In a highly sophisticated new campaign, the threat...