Back to Blog
88 posts with this tag
#CVE
88 posts
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide | 2026 Executive Summary Since August 18, 2026, the critical CVE-2026-33824 vulnerability in Microsof...
Last updated on 19/08/2026 at 2:03 PM
7 min read
Lucas Oliveira
Research
macOS Screen Sharing CVE-2026-65400 exploited to gain root and deploy Monero miners
macOS Screen Sharing CVE-2026-65400 exploited to gain root and deploy Monero miners Executive Summary Threat actors are exploiting CVE-2026-65400, a recently pa...
Last updated on 17/08/2026 at 12:12 PM
5 min read
Lucas Oliveira
Research
SharePoint JWT Bypass Turns Patch Delay Into an Identity Risk
SharePoint JWT Bypass Turns Patch Delay Into an Identity Risk Attackers have started targeting a critical Microsoft SharePoint Server authentication bypass afte...
Last updated on 17/08/2026 at 1:02 PM
6 min read
Lucas Oliveira
Research
Metabase zero-day turns BI dashboards into a data-exposure path
Metabase zero-day turns BI dashboards into a data-exposure path Metabase has confirmed active exploitation of CVE-2026-72898, a critical unauthenticated [SQL in...
Last updated on 15/08/2026 at 1:46 PM
6 min read
Lucas Oliveira
Research
Gitea Org-mode flaw turns public repositories into a server file-read risk
Gitea Org-mode flaw turns public repositories into a server file-read risk Gitea administrators have a critical patch to verify. The project has fixed CVE-2026-...
Last updated on 08/08/2026 at 8:06 AM
6 min read
Lucas Oliveira
Research
N-able N-central flaw exposes MSP consoles to account takeover
N-able N-central flaw exposes MSP consoles to account takeover N-able has released an emergency hotfix for N-central after confirming active exploitation of an...
Last updated on 16/08/2026 at 11:21 AM
5 min read
Lucas Oliveira
Research
Hugging Face Diffusers flaws turn model loading into a code execution risk
Hugging Face Diffusers flaws turn model loading into a code execution risk Security researchers have disclosed a set of Hugging Face Diffusers vulnerabilities t...
Last updated on 03/08/2026 at 8:05 AM
6 min read
Lucas Oliveira
Research
Adobe Campaign Classic flaws put on-prem marketing systems on the emergency patch list
Adobe Campaign Classic flaws put on-prem marketing systems on the emergency patch list Adobe has released an urgent security update for Adobe Campaign Classic a...
Last updated on 02/08/2026 at 8:06 AM
5 min read
Lucas Oliveira
Research
AWS Kiro flaw shows why AI coding agents need platform-level guardrails
AWS Kiro flaw shows why AI coding agents need platform-level guardrails AWS has patched a Kiro IDE security issue that captures one of the sharpest risks in age...
Last updated on 17/08/2026 at 12:56 PM
7 min read
Lucas Oliveira
Research
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation Cisco has released hot fixes for CVE-2026-20316, a static credential [vulnerability](htt...
Last updated on 17/08/2026 at 12:56 PM
7 min read
Lucas Oliveira
Research
JetBrains TeamCity RCE Puts Self-Hosted CI/CD Servers on an Urgent Patch Clock
JetBrains TeamCity RCE Puts Self-Hosted CI/CD Servers on an Urgent Patch Clock JetBrains has released fixes for CVE-2026-63077, a critical unauthenticated [remo...
Last updated on 17/08/2026 at 12:56 PM
7 min read
Lucas Oliveira
Research
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access STAR Labs has published technical details for CVE-2026-53264, a Linux kernel race...
Last updated on 17/08/2026 at 12:56 PM
9 min read
Lucas Oliveira
Research
Tags
7-Zip
1
aaylex
0
Access Control
5
Account Takeover
8
active-directory
1
Active Exploitation
5
ActiveMQ
1
Adobe
2
Adobe Campaign Classic
1
Adobe Commerce
1
AI Security
16
ALPHV
0
Apache
1
API Security
3
Apple
1
Application Security
3
APT28
1
Archive Security
1
Arista
1
Artificial Intelligence
2
Authentication
1
Authentication Bypass
18
Authentication Tokens
3
Authorization Bypass
1
Automotive Security
0