Oracle mitigates PeopleSoft zero-day exploited in data theft attacks Source: BleepingComputer Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. […] Read original
Oracle mitigates PeopleSoft zero-day exploited in data theft attacks Source: BleepingComputer Oracle is warning about a critical PeopleSoft Suite zero-day vulnerability tracked as CVE-2026-35273 that allows unauthenticated remote code execution, with the flaw actively exploited in ShinyHunter data theft attacks. […] Read original
CISA tells govt agencies to patch critical exploited flaws in 3 days Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced a new Binding Operational Directive, 26-04, that prioritizes security updates for Federal Civilian Executive Branch (FCEB) agencies. […] Auto-curated by daily feed. Read original.
CISA tells govt agencies to patch critical exploited flaws in 3 days Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced a new Binding Operational Directive, 26-04, that prioritizes security updates for Federal Civilian Executive Branch (FCEB) agencies. […] Read original
Path traversal flaw in AI dev platform Langflow exploited in attacks Source: BleepingComputer Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. […] Auto-curated by daily feed. Read original.
Path traversal flaw in AI dev platform Langflow exploited in attacks Source: BleepingComputer Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. […] Read original
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The list of vulnerabilities is as follows - CVE-2026-20245 (CVSS score: 7.8) - An improper Auto-curated by daily feed. Read original.
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The list of vulnerabilities is as follows - CVE-2026-20245 (CVSS score: 7.8) - An improper Read original
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The list of vulnerabilities is as follows - CVE-2026-20245 (CVSS score: 7.8) - An improper Read original
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The list of vulnerabilities is as follows - CVE-2026-20245 (CVSS score: 7.8) - An improper Read original