cve-2026-21385
65 articles with this tag
✨
AI summary
Loading…
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
Google fixes one actively exploited Android zero-day, 124 flaws
Google patches critical Android remote code execution flaw
March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Day
OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
9 Critical IP KVM Flaws Enable Unauthenticated Root Access Across Four Vendors
Claude Code Security and Magecart: Getting the Threat Model Right
Ubuntu CVE-2026-3888 Bug Lets Attackers Gain Root via systemd Cleanup Timing Exploit
Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS
Critical Unpatched Telnetd Flaw (CVE-2026-32746) Enables Unauthenticated Root RCE via Port 23
AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
AI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds
Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware
CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths
GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage
Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse
OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration
GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers
Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026
Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware
INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime
Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials
Nine CrackArmor Flaws in Linux AppArmor Enable Root Escalation, Bypass Container Isolation
Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8
Authorities Disrupt SocksEscort Proxy Botnet Exploiting 369,000 IPs Across 163 Countries
Veeam Patches 7 Critical Backup & Replication Flaws Allowing Remote Code Execution
Hive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks
Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays
Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit
CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed
Researchers Trick Perplexity's Comet AI Browser Into Phishing Scam in Under Four Minutes
Critical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
Meta Disables 150K Accounts Linked to Southeast Asia Scam Centers in Global Crackdown
What Boards Must Demand in the Age of AI-Automated Exploitation
Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices
Microsoft Patches 84 Flaws in March Patch Tuesday, Including Two Public Zero-Days
UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours
Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets
FortiGate Devices Exploited to Breach Networks and Steal Service Account Credentials
KadNap Malware Infects 14,000+ Edge Devices to Power Stealth Proxy Botnet
Qualcomm Zero-Day Exploited in Targeted Android Attacks
New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military
The Zero-Day Scramble is Avoidable: A Guide to Attack Surface Reduction
How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited
Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS Credentials
9th March – Threat Intelligence Report
UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware
Bulletin d'actualité CERTFR-2026-ACT-010 (09 mars 2026)
Tracking the Top 10 exploited CVEs of the week (updated daily)
Patch, track, repeat: The 2025 CVE retrospective
High-severity Qualcomm bug hits Android devices in targeted attacks
Qualcomm Zero-Day Exploited in Targeted Android Attacks
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Multiples vulnérabilités dans Google Android (03 mars 2026)
Android Update Patches Exploited Qualcomm Zero-Day
Android’s March 2026 security patch fixes over 100 flaws, one under targeted exploitation
Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited
Android gets patches for Qualcomm zero-day exploited in attacks
Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities