Vulnerabilities

Flat white line-art of a car silhouette beside a database cylinder and an employee record card — Nissan employee data breach linked to Oracle PeopleSoft

Data Breaches

Nissan Discloses Employee Data Breach Linked to Oracle PeopleSoft Zero-Day

A high-profile Oracle PeopleSoft customer disclosure: Nissan says current and former employees' data was exposed via CVE-2026-35273, with sector-advisory implications for the broader Oracle exploitation cycle.

Flat white line-art of a code-editor window, a cloud holding a key, and a repository box — Amazon Q Developer VS Code extension flaw affecting cloud

Vulnerabilities

Researchers Disclose Amazon Q Developer VS Code Flaw Affecting Cloud Credentials

A coding-AI-assistant flaw with cloud-credential implications — defender posture review for the week.

Flat white line-art of a phone, a laptop, a patch shield tile, and a small chip motif — Apple 30+ iOS, macOS, Safari patches with AI-discovered WebKit bugs.

Vulnerabilities

Apple Patches 30+ iOS, macOS, and Safari Flaws, Including AI-Discovered WebKit Bugs

Apple shipped an early, large patch cycle across iOS, macOS, and Safari — including four WebKit bugs surfaced by AI tools from OpenAI and Anthropic. For defenders, this is a device-verification week.

Flat white line-art of an institution building linked by a line to a database cylinder and a record card — US insurance regulator Oracle-linked data breach.

Data Breaches

Insurance Regulator Body NAIC Confirms Breach Linked to Oracle PeopleSoft Flaw

Another insurance-sector confirmation in the Oracle PeopleSoft vulnerability cycle: the body that supports US state insurance regulators says attackers reached its environment through CVE-2026-35273, exposing statutory financial and credit-rating data.

Linux

Researchers Publish "pedit COW" Linux Disclosure (CVE-2026-46331)

Researchers detailed pedit COW, CVE-2026-46331, a Linux kernel privilege-escalation flaw in the act_pedit traffic-control action — a second Linux disclosure in the same weekend as DirtyClone, with distribution patch tracking continuing.

Flat white line-art of a factory PLM gear, a server panel, and a catalog list card — CISA PTC Windchill RCE KEV addition.

Vulnerabilities

CISA Adds Exploited PTC Windchill RCE Flaw CVE-2026-12569 to KEV Catalog

CISA's KEV addition raises the priority for PTC Windchill defenders, who now face an actively exploited remote code execution flaw, continuing web-shell activity, and a tight federal remediation deadline.

Linux

Researchers Publish "DirtyClone" Linux Kernel Disclosure (CVE-2026-43503)

Another Linux kernel research disclosure — distribution patch tracking work for the week. JFrog published a working exploit for DirtyClone, a local privilege escalation to root in the kernel networking stack, fixed upstream in late May.

Flat white line-art of a call-control server beside a large clock and a patch tile — Cisco Unified CM CVE-2026-20230 24-hour exploitation.

Vulnerabilities

Cisco Unified CM Flaw CVE-2026-20230 Exploited Within 24 Hours of Disclosure

Time-to-patch matters: a public proof-of-concept for Cisco Unified CM's CVE-2026-20230 was weaponized in under 24 hours, dropping webshells on internet-exposed call-control servers and earning a place on CISA's KEV catalog.

Flat white line-art of a laptop showing a shield on screen beside a large toggle switch — macOS EDR and MDM standard-user disable research.

Vulnerabilities

Researchers Disclose macOS Flaw Allowing Standard Users to Disable EDR and MDM

A macOS endpoint-protection bypass with defender posture-review implications. XM Cyber researchers showed that a standard, non-admin user can silently unload EDR and MDM agents on macOS, abusing legitimate XPC behavior rather than a single patchable bug.

Flat white line-art of an SD-WAN router node beside a magnifier and a small clock — Cisco Catalyst SD-WAN CVE-2026-20245 continued exploitation.

Vulnerabilities

Cisco SD-WAN Zero-Day Exploitation Continues; Catalyst Customers Urged to Verify Patches

The Catalyst SD-WAN saga continues — defender verification posture stays active. Reporting around CVE-2026-20245 keeps tracking the root-level CLI flaw as customers confirm fixed builds across their deployments.

Flat white line-art of a wireless access-point dome, a small serial-device box, and a catalog list card — CISA KEV Ubiquiti and Lantronix additions.

Vulnerabilities

CISA Adds Critical Ubiquiti and Lantronix Vulnerabilities to KEV Catalog

Two vendors, four exploited flaws, one short federal deadline — CISA's latest KEV additions hand defender teams a concentrated patch-verification job across UniFi OS and Lantronix edge-server fleets this week.

Flat white line-art of a timeline bar with a marked gap, a router node, and a magnifier — Mandiant Cisco SD-WAN CVE-2026-20245.

Vulnerabilities

Mandiant Publishes Analysis of Cisco SD-WAN Zero-Day Exploitation Window

A two-month exposure window prior to the vendor advisory — defenders' SD-WAN posture review continues as Mandiant's analysis of the root-access zero-day lands.

See all