Vulnerabilities

Flat white line-art of an envelope linked to a browser window — Zimbra Classic Web Client critical stored XSS advisory.

Vulnerabilities

Zimbra Urges Customers to Patch Critical Classic Web Client XSS Flaw

A critical Zimbra webmail advisory — defender teams accelerate patch verification this week.

Flat white line-art of a wallet outline linked to a simple key — Coinspect Ill Bloom crypto-wallet recovery-phrase flaw.

Vulnerabilities

Coinspect Discloses “Ill Bloom” Wallet Recovery-Phrase Flaw Tied to Over $5 Million in Losses

A weak-randomness crypto-wallet finding — cryptocurrency-user awareness this week.

Vulnerabilities

Binarly Discloses Six New U-Boot Bootloader Vulnerabilities in Routers, Cameras, and Server Chips

A six-flaw U-Boot disclosure with cross-vendor device implications — defender posture review this week.

Flat white line-art of a server tower powered off beside a cloud panel — Progress ShareFile Storage Zone Controllers shutdown.

Vulnerabilities

Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Threat

An emergency vendor directive landed this week: Progress Software told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, citing a credible external security threat and temporarily disabling access to affected accounts out of an abundance of caution.

Flat white line-art of a leaning server tower beside a broken network ring — XRING XQUIC HTTP/3 server-crash research disclosure.

Vulnerabilities

Researchers Disclose Unpatched "XRING" Flaw That Lets Remote Clients Crash HTTP/3 XQUIC Servers

An unpatched HTTP/3 QUIC-library finding — defender teams review protocol posture this week.

Vulnerabilities

Palo Alto Networks Patches 13 Vulnerabilities in Coordinated Advisory

A large-scale Palo Alto patch cycle — defender verification across product fleets this week.

Flat white line-art of a shield with a closed padlock beside a wrench mid-turn — Microsoft RoguePlanet Defender patch.

Vulnerabilities

Microsoft Patches RoguePlanet Defender Flaw That Could Grant SYSTEM Privileges

The RoguePlanet Defender saga closes with Microsoft's patch — defender teams accelerate verification this week.

Linux

Researchers Disclose "GhostLock," a 15-Year-Old Linux Flaw Enabling Root and Container Escape

Another long-standing Linux finding lands with defender-team implications across distributions and container platforms.

Flat white line-art of a large coin linked to a nested server box by one line — Google's $250,000 Linux KVM guest-to-host escape bounty.

Vulnerabilities

Google Awards $250,000 Bounty for Linux KVM Guest-to-Host Escape

A significant Google bounty award draws attention to a Linux virtualization finding — defender review continues this week.

Flat white line-art of a wireless access-point dome above five stacked application cards — Ubiquiti UniFi critical patches across multiple products.

Vulnerabilities

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and UniFi OS

A multi-product UniFi patch cycle from Ubiquiti — defender verification across product fleets this week.

Flat white line-art of a checklist clipboard beside three stacked software boxes — CISA adds four flaws to the KEV catalog.

Vulnerabilities

CISA Adds Four Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog

Four KEV additions across three vendors — defender patch-verification work concentrates this week.

Flat white line-art of a locked gateway beside two remote-access terminals — BeyondTrust Remote Support and PRA authentication-bypass patches.

Vulnerabilities

BeyondTrust Patches Critical Authentication-Bypass Flaws in Remote Support and PRA

A critical vendor advisory across two remote-access products — defender teams accelerate patch verification this week.

See all