Cisco fixes actively exploited CVE-2026-20045 zero-day enabling unauthenticated RCE in Unified CM and Webex; CISA sets Feb 11, 2026 deadline.

In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on ...

Threat actors started exploiting a SmarterMail authentication bypass flaw for remote code execution only days after patches ...

CISA has expanded the KEV list with exploited vulnerabilities in Zimbra, eslint-config-prettier, Versa Concerto, and Vite framework.

A recent Fortinet patch may not work as well as expected ...

Arctic Wolf reports automated attacks on FortiGate devices abusing FortiCloud SSO flaws to change firewall settings and steal ...

Check Point observes 40K+ attack attempts in 4 hours, with government organizations under fire A critical HPE OneView flaw is ...

Cisco has fixed a critical Unified Communications and Webex Calling remote code execution vulnerability, tracked as ...

Fortinet FortiGate devices are being targeted in automated attacks that create rogue accounts and steal firewall ...

Exploit code has been published for CVE-2025-64155, a critical command injection vulnerability affecting Fortinet FortiSIEM ...

Among them is a zero-day vulnerability in Desktop Window Manager (DWM) designated as CVE-2026-20805 (CVSS score: 5.5), which ...

The RCE flaw lets remote attackers gain root on affected systems with no user interaction. Cisco has released multiple ...