#уязвимости
-
MikroTrick: Taking Over MikroTik Routers Without a Password or Key
CERT Polska has detailed a chain of two RouterOS flaws that let attackers gain full administrative control of Internet-exposed MikroTik routers without ever completing authentication.
-
CISA Flags Active Attacks on Zyxel Switches and Veeam Windows Agent
A Zyxel GS1900 switch flaw has been added to the known-exploited catalog, while researchers warn of attacks on a local Veeam Agent bug that grants SYSTEM-level access.
-
HEIF Heist: an attack on image decoders threatens entire ecosystems
Researchers at Hacktron have described a class of vulnerabilities in native HEIF, HEIC and AVIF decoders that allow remote code execution and data leakage through image uploads.
-
SolarWinds Patches Hard-Coded Key Flaw in Access Rights Manager
SolarWinds has released security updates fixing a flaw in Access Rights Manager that allowed arbitrary code execution without authentication. The cause was a hard-coded static key.
-
AI Helped Hijack OpenAI Employee Accounts Through a Chain of Vulnerabilities
Using Claude Opus 5, Hacktron researchers chained two vulnerabilities together, hijacked the ChatGPT and Codex accounts of OpenAI employees, and reached an internal repository. This was legitimate research, not a real attack.
-
CISA Adds Three Linux Kernel Vulnerabilities to Its Actively Exploited Catalog
The U.S. agency CISA has added three Linux kernel flaws to its catalog of known exploited vulnerabilities, citing evidence of attacks in the wild. Federal agencies are ordered to remediate them by September 21.
-
Microsoft Patches Azure AI Foundry Flaw With Maximum CVSS Score of 10.0
A critical hole has been found in the Azure AI Foundry platform that let an unauthenticated attacker elevate privileges over the network. Microsoft has already fixed the issue on its end — no customer action is required.
-
Intel Shuts Down Its Bug Bounty Program
The company has suspended its former bug bounty and launched a new program — this time with no payouts to researchers. The likely reason: a flood of AI-generated reports.
-
Four Local Root Vulnerabilities in the Linux Kernel: DirtyAH6, TUNderflow, PPPoEject and DiagSpill
Researcher Asim Manizada has disclosed four vulnerabilities in the Linux kernel that let an unprivileged user gain root. The bugs are between 10 and 21 years old, and the fixes have already landed in the stable branches.
-
Cisco Fixes a Critical 0-Day in Identity Services Engine Already Being Used in Attacks
The CVE-2026-76460 vulnerability allows authentication to be bypassed via the API and grants access to the device without credentials. Cisco and CISA strongly urge installing the updates immediately.
-
One Extension Against Five AI Browsers: How to Bypass an Agent's Defenses
Researchers at Forever Security have shown that an ordinary browser extension can hijack the built-in AI assistants in Chrome, Comet, Edge, Opera Neon and the Claude extension. For now, the attacks remain demonstrations.
-
A Critical ScreenConnect Vulnerability Is Already Being Exploited in Attacks
CISA warns of active exploitation of a critical flaw in ConnectWise ScreenConnect and orders federal agencies to fix it within three days.
-
Critical WSO2 API Manager Vulnerability Allowing Admin-Token Forgery Is Already Being Exploited
Researchers at watchTowr have observed active attacks against WSO2 API Manager: attackers bypass JWT validation and gain administrator privileges. The vulnerability has been assigned the maximum severity rating.
-
Acronis: Actively Exploited Vulnerability in cPanel Backup Plugin
Acronis has reported a high-severity local privilege escalation vulnerability in its plugins for cPanel, WHM and Plesk. According to the company, the flaw is already being used in limited, targeted attacks.
-
Critical LiteSpeed Enterprise Flaw Hands Out Root on Shared Hosting
cPanel warned that a defect in LiteSpeed Web Server Enterprise lets the owner of a single account take over an entire shared-hosting server. A patch is already out, but it's in no hurry to arrive automatically.
-
Red Heron Breaches 13 Organizations Through a Gitea Vulnerability
In a matter of days, the presumed Chinese group Red Heron turned a public Gitea exploit into an automated tool and struck targets across six countries.
-
CISA: Critical GitLab Vulnerability Already Being Exploited in Attacks
The CISA agency has warned of active exploitation of a maximum-severity vulnerability in GitLab that allows secrets to be read from vulnerable servers without authentication.
-
Attacks on JFrog Artifactory: A Flaw Chain Opens the Path to Admin Rights
Wiz has recorded attacks on unpatched self-hosted JFrog Artifactory servers: attackers chained two vulnerabilities to gain administrator rights and plant backdoors.
-
Attack on PaperCut: Hundreds of AI Agents Breach 440 Servers in 48 Countries
A Russian-speaking threat actor built a pipeline of hundreds of AI agents that researched PaperCut vulnerabilities on its own, wrote exploits and scaled the attack against educational institutions worldwide.
-
Check Point Patches Two Critical Flaws in VPN Certificate Handling
Both holes carry a 9.8 rating and could, in theory, let an unauthenticated attacker execute code remotely — but the vendor won't spell out the “certain conditions.”
- More