During the September 2026 Patch Tuesday, Microsoft resolved no fewer than 964 CVEs: 104 critical and 860 important. Extra urgent: two zero-days (CVE-2026-81963 and CVE-2026-85880) are already being actively exploited and can grant attackers SYSTEM privileges. Serious vulnerabilities in Remote Desktop, Windows DNS, Kerberos, and Exchange Server, among others, have also been addressed. With 44.7% […]
Hackers are actively exploiting a critical zero-day vulnerability in the WordPress plugin WPGateway & have attacked more than 280,000 sites in the last 30 days, adding malicious admins to the successfully breached sites.
Microsoft has issued a warning for a zerodaylek in Internet Explorer, where it operates through Office documents to any other. The vulnerability is located in MSHTML, which is the Microsoft-developed browser engine in Internet Explorer. MSHTML in Office applications, is used to display web content in a document.As now observed the attack send the attackers […]
A ransomware group caught targeting a recently patched SonicWall vulnerability leveraged that vulnerability before the patch became available, Mandiant reported.The vulnerability, a SQL injection bug in SonicWall’s SMA-100 series of remote access products, was already used in a headline-grabbing attack. Hackers used the vulnerability as a zero-day to breach SonicWall itself prior to the patch […]