CISA Flags Six Exploited Flaws, and One Is Already Getting Hit
CISA KEV six exploited flaws just landed, and one Citrix NetScaler bug is already taking live web shell hits.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
Nutex Health Breach: Hackers Slip Into Hospital Network, Walk Out With Files
The Nutex Health data breach saw hackers pull files off hospital servers, and patient records may be part of the haul.
Attackers Turn npm Mirrors Into Free Phishing Hosting, Researchers Say
Researchers found npm mirror phishing pages hiding inside 24 packages, turning trusted developer domains into free hosting for fake CAPTCHA screens.
Three Small Cracks, One Open Door: How “ShadowPanel” Turns CyberPanel Into an Attacker’s Server
A new CyberPanel RCE vulnerability chain lets attackers reach the server with no password at all.
The Security Tool Meant to Guard Your Network Just Became the Way In
A critical Cisco Secure Workload vulnerability hands attackers full Site Admin control without a single password.
Attackers Are Already Inside Zimbra Mail Servers. Patched or Not, Check Yours Today.
A critical Zimbra RCE vulnerability is under active attack. Patch to 10.1.20 now and hunt your mail servers for compromise.
GitLab Breaks Its Own Schedule to Kill a 9.4 GraphQL Flaw
A GitLab critical GraphQL flaw lets anonymous attackers wipe or rewrite public projects, and GitLab pushed an off-schedule patch to stop it.
CISA Puts a Critical Ray AI Flaw on Its Must-Patch List After Real World Attacks
CISA just added a critical Ray AI flaw to its must-patch list, and researchers say botnets are already circling exposed clusters.
The Silent Flaw That Let Strangers Delete Your Code
A critical GitLab GraphQL vulnerability let unauthenticated attackers delete public projects, and the emergency patch is out.
Hackers Turn a VMware vCenter Fix Into a Global Break-In
A critical VMware vCenter vulnerability let attackers seize 361 servers across 47 countries just five days after the patch dropped.
A Script, a RAM Chip, and Windows 11’s Toughest Defenses Fall
A new Windows 11 security bypass abuses unprotected RAM config chips to fake memory and switch off the defenses admins count on.
One Login, Four Flaws, and Every Windows Machine in the Building
A newly disclosed SCCM exploit chain lets any domain user seize SYSTEM control of the site server, and every machine it manages.