WordPress Sites Face 60,000+ Attacks in 24 Hours Targeting a Narrow Update-Time Flaw
A newly patched WordPress Core vulnerability that briefly exposes a hidden installer during software updates has already drawn more than 60,000 blocked attack attempts in a single day,...
WatchGuard Patches Seven Critical Firebox Flaws With CVSS Scores Up to 9.5
WatchGuard's October 27 security advisory discloses 18 vulnerabilities in Fireware OS and its Windows Mobile VPN client, seven of them rated critical with CVSS scores between 9.1 and...
Unpatched UEFI Bug Lets Attackers Hijack Servers Before the Operating System Even Boots
A critical flaw in the open-source EDK II firmware powering network-booting servers, desktops, and laptops lets an unauthenticated attacker crash or potentially hijack a machine during PXE boot,...
Critical Okta Access Gateway Bug Lets Rogue Admins Run System Commands
Okta has patched a critical flaw in Access Gateway, tracked as CVE-2026-115547 with a CVSS score of 9.1, that lets an already-authenticated administrator trigger system command execution through...
Palo Alto Confirms PAN-OS Firewalls Exposed to Critical PHP Remote Code Execution Bugs
Palo Alto Networks has confirmed that two critical PHP vulnerabilities reach into PAN-OS firewalls and Panorama management systems, with hotfixes still days away. Proof-of-concept exploits already exist for...
Attackers Are Actively Hijacking Unpatched Citrix NetScaler Appliances to Plant Web Shells
Security researchers have documented a live exploitation campaign against a critical, already-disclosed Citrix NetScaler flaw, using a clever log-poisoning technique to achieve remote code execution, install web shells,...
Critical Cisco Expressway Cluster Flaw Opens Path to Root RCE
Cisco has patched a CVSS 9.8 vulnerability that could let a remote attacker execute operating-system commands as root on clustered Expressway systems. There is no workaround, making an...
Splunk Patches 24 Flaws, Including Four Critical Enterprise and SOAR Bugs
Splunk has issued a broad security release correcting 24 vulnerabilities across Enterprise, SOAR, and Secure Gateway. Four flaws are rated critical, while several others create command-execution, authorization-bypass, or...