FortiClient EMS Under Fire: Critical CVE-2026-21643 Exploited in Real-World Attacks
A critical SQL injection vulnerability, CVE-2026-21643, has been identified in FortiClient Endpoint Management Server (EMS), a centralized management platform for…
A critical SQL injection vulnerability, CVE-2026-21643, has been identified in FortiClient Endpoint Management Server (EMS), a centralized management platform for…
The Node.js project has recently released a series of security updates to address multiple vulnerabilities across its active release lines.…
A significant vulnerability has been discovered in Anthropic's Claude Google Chrome Extension, potentially allowing malicious actors to inject prompts into…
Citrix has released a security advisory addressing two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical vulnerability tracked…
The discovery of CVE-2026-33017 reveals a critical remote code execution vulnerability in Langflow that is being actively exploited in the…
A critical vulnerability, tracked as CVE-2026-21992, has been identified in Oracle Identity Manager (OIM) and Oracle Web Services Manager (OWSM).…
Executive Summary Operation GhostMail is a high-stakes cyber-espionage campaign attributed to the Russian threat actor APT28 (Fancy Bear). By exploiting a critical stored…
Executive Summary Interlock group has been observed exploiting the critical vulnerability CVE-2026-20131 (CVSS 10.0) in Cisco Secure Firewall Management Center…
Microsoft has deployed an emergency out-of-band update (KB5084597) to fix critical vulnerabilities in the Windows Routing and Remote Access Service…
In a race against active threats, Google Chrome has released another emergency update to patch two critical zero-day vulnerabilities, CVE-2026-3909…