WordPress Sites Face 60,000+ Attacks in 24 Hours Targeting a Narrow Update-Time Flaw
A newly patched WordPress Core vulnerability that briefly exposes a hidden installer during software updates has already drawn more than 60,000 blocked attack attempts in a single day,...
TightVNC Viewer Flaw Lets Attackers Run Code Before the Login Prompt Even Appears
A researcher has published working exploit code for a pre-authentication vulnerability in the TightVNC Viewer that lets a malicious remote server corrupt memory and run arbitrary code on...
Maximum-Severity Certificate Bug in LXD and Incus Lets Attackers Forge Trust and Seize Linux Clusters
A critical, unauthenticated vulnerability in LXD and Incus — two widely used Linux container and virtual machine management platforms — lets remote attackers forge trusted identities and seize...
WatchGuard Patches Seven Critical Firebox Flaws With CVSS Scores Up to 9.5
WatchGuard's October 27 security advisory discloses 18 vulnerabilities in Fireware OS and its Windows Mobile VPN client, seven of them rated critical with CVSS scores between 9.1 and...
Zero-Click Telegram Sticker Bugs Chained to Achieve Code Execution on iOS, Researcher Claims
Researcher Saifeldeen Aziz says he spent a year fuzzing Telegram's rlottie animation library and found new zero-click bugs in animated stickers, chaining them into working code execution on...
CISA Gives Agencies Until Halloween to Patch a Linux Kernel Flaw Already Under Attack
CISA has added a high-severity Linux kernel flaw, tracked as CVE-2026-46300, to its Known Exploited Vulnerabilities catalog after confirming active attacks, giving federal agencies an October 31 deadline....
Unpatched UEFI Bug Lets Attackers Hijack Servers Before the Operating System Even Boots
A critical flaw in the open-source EDK II firmware powering network-booting servers, desktops, and laptops lets an unauthenticated attacker crash or potentially hijack a machine during PXE boot,...
Three TLS Flaws in Widely Embedded GoAhead Web Server Undermine Certificate Trust on Millions of Devices
Researchers have disclosed three flaws in GoAhead, a lightweight web server embedded in routers, printers, industrial controllers, and networking gear from vendors including Palo Alto Networks, Siemens, and...