Chinese APT Armory Castle exploited a BeyondTrust vulnerability tracked as CVE-2026-102764 as a zero-day since August.

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.

An attacker drained about $86,000 from a UNCX Network shared vesting pool on Ethereum, with roughly $3.25 million still at ...

CISA flags six exploited flaws in Plex, Siemens, and SiteGuard, including Plex2Shell bugs used to deploy crypto miners and ...

Armory Castle exploited a BeyondTrust Remote Support zero-day on a self-hosted appliance and deployed the SAWFLY web shell.

In a record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including the actively exploited ...

A Windows zero-day vulnerability recently patched by Microsoft was exploited by hackers working on behalf of the North Korean government so they could install custom malware that’s exceptionally ...

Google Threat Intelligence Group (GTIG) tracked 90 zero-day vulnerabilities actively exploited throughout 2025, almost half of them in enterprise software and appliances. The figure is a 15% increase ...

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.

When attackers exploit AI-identified flaws, attacks are disproportionately likely to result in remote code execution. Learn ...