Learn Ethical Hacking

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO.

The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for the flaw were

Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them.

Threat intelligence firm CloudSEK now says a dataset it obtained, built from roughly 434,000 files the attackers captured, maps potential exposure to more

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.

The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation.

“SAP Commerce Cloud allows an

Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.

The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.

A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.

The post August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day appeared first on SecurityWeek.

The security defects could be exploited for arbitrary code execution and denial-of-service.

The post Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws appeared first on SecurityWeek.

Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine.

The post Zoom Patches Zero-Click Code Execution Vulnerability appeared first on SecurityWeek.

Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.

The post The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It appeared first on SecurityWeek.

Kerianne Tobitsch, who most recently served as a senior lawyer at the Homeland Security Department, is the NSA’s new general counsel, sources told Recorded Future News.