4+ day, 14+ hour ago   (317+ words) Security researchers warned the company of unusual threat activity in a recently updated N-able environment. Security company N-able has issued an emergency hotfix to address a critical zero-day vulnerability in its N-central platform. The pre-authentication flaw in N-central, tracked as…...

1+ week, 5+ day ago   (449+ words) The print management software maker faced a wave of attacks in 2023 aimed at higher education customers. The company confirmed in a security advisory that multiple customers were successfully targeted and that it is working with security researchers at Huntress and…...

2+ week, 4+ day ago   (277+ words) An authentication bypass flaw is already under exploitation, the latest in a series of recent SharePoint attacks. Two critical vulnerabilities in Microsoft SharePoint can be chained together to let an unauthenticated attacker execute code on a vulnerable server, according to…...

2+ week, 4+ day ago   (310+ words) The collaboration software’s developer took almost a full month to patch the flaw after disclosing it. The Cybersecurity and Infrastructure Security Agency (CISA) on Friday ordered agencies to rapidly patch a vulnerability in the Zimbra Collaboration Suite that malicious actors…...

3+ week, 1+ day ago   (190+ words) The company said the remote-code execution vulnerability has been fully mitigated and no further action is necessary. Microsoft said a critical remote-code execution vulnerability in Entra ID has been exploited in the wild. The vulnerability, tracked as CVE-2026-69836, is related…...

3+ week, 3+ day ago   (388+ words) Hackers are developing scripts disguised as legitimate software in attacks aimed at multiple industries, including energy and water. U.S. authorities on Wednesday warned of an AI-fueled campaign that attempts to exploit vulnerable Siemens S7 devices across multiple industries, including energy, water, critical…...

3+ week, 4+ day ago   (292+ words) Researchers warn that unauthenticated attackers would be able to delete or modify publicly accessible projects. Security researchers are raising concerns after GitLab on Monday issued an out-of-band patch for a critical code injection vulnerability. The vulnerability, tracked as CVE-2026-19478, could…...

3+ week, 4+ day ago   (1102+ words) The U.S. government’s promises about the “Gold Eagle” coordination program are overblown, experts said, but the initiative could help organizations prioritize patching and mitigation. The Trump administration says a new AI-enhanced clearinghouse will dramatically speed up the process of analyzing and…...