Alert

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that hackers are using CVE-2008-4128, a CSRF flaw in Cisco IOS versions 12.4(12) and 12.4(4). This weakness was included in CISA’s Known Exploited Vulnerabilities Catalog on July 13, 2026, showing that old networking flaws can still be security threats long …

Palo Alto Networks shared warnings on Wednesday about over twelve security issues in its products. The new warnings include 13 security problems for Palo Alto Networks products and over 500 issues that Google recently fixed in Chromium, which is used for the Prisma browser. The worst of the new fixes is …

A critical flaw in Google Cloud Platform’s Dialogflow CX lets attackers add harmful code to a company’s AI chatbot system. The flaw, called “Rogue Agent,” was revealed by Varonis Threat Labs. It could secretly steal conversations and allow big phishing attacks, needing just one edit permission to start. GCP Dialogflow …

CIRT identified 153 publicly exposed FortiGate devices in Bangladesh. In an advisory CIRT said, the campaign has been observed globally, affecting organizations across 194 countries. The systems have the “fortibleed” label, meaning they might be at risk for losing login details and being accessed without permission due to issues with …

Several Tenda firmware versions have a hidden backdoor that lets people gain admin access to the device’s web interface. An attacker can use this flaw, known as CVE-2026-11405, to skip the password check and take full control without proper login details, the CERT Coordination Center (CERT/CC) reported on Monday. “An …

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a serious problem affecting Microsoft SharePoint Server to its list of known threats on Wednesday. They reported that this flaw is currently being exploited. The weakness, called CVE-2026-45659 (CVSS score: 8.8), allows bad code to run from unsafe data. Microsoft fixed …

The Shadowserver Foundation found about 950 Oracle E-Business Suite (EBS) systems on the internet around the world. This discovery came after they improved their fingerprinting method with help from Validin LLC. The new detection method now uses both domain scanning and regular IP scanning. It has found active attacks using …

Chrome 151 has a new update that fixes 382 security problems. This includes 15 critical issues that could allow attackers to run harmful code and take over the browser if not fixed. Google is sending out this update for Windows, macOS, Linux, and Chrome for iOS. The update has security …

Apple released security updates on Monday for iOS, macOS, and Safari. These updates fix more than thirty issues, including four problems in WebKit found using AI tools like Anthropic Claude and OpenAI Codex Security. The WebKit vulnerabilities are listed below: CVE-2026-43707:  A memory corruption issue that could result in an …

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) asked Fortinet users with FortiGate devices on Thursday to act to protect against harmful attacks on many internet-connected devices. The large campaign, thought to be done by Russian-speaking hackers, is called FortiBleed. There are 86,644 targeted devices as of June 19, 2026. …