Vulnerabilities
116 stories · back to Cybersecurity
New N-able "4EverAble2Shell" zero-day exploited hours after PoC released
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed "4EverAble2Shell" to compromise servers and deploy cryptocurrency miners, with researchers reporting at least 21 affected systems, including 19 running the company's latest security update.
Linux kernel reviewer steps down from memory management duties due to influx of AI slop patches
Lorenzo Stoakes has announced he is stepping down from several of his memory management duties in the Linux kernel, citing an overwhelming volume of AI-generated patch submissions.
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software.
New Windows 11 update fixes File Explorer menu mess – and patches an exploited flaw
With the November Patch Tuesday rollout, you can finally customize your right-click menu in Windows 11. It fixes 1,094 security flaws, too.
Microsoft releases Windows 10 KB5131096 extended security update
Microsoft released the Windows 10 KB5131096 extended security update, which includes this month's November 2026 Patch Tuesday fixes and a few bug fixes and changes.
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
Today is Microsoft's November 2026 Patch Tuesday, with security updates addressing a record-breaking 1,235 flaws, including one actively exploited Microsoft Outlook zero-day vulnerability.
Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.
Google patches eighth Chrome zero-day exploited in attacks this year
Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year.
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
A vulnerability in Linux systems running OpenSSH alongside the musl code library is being actively exploited, allowing attackers to gain unauthenticated access to high-privilege accounts within seconds.
QNAP says hackers breaching NAS devices in Plex2Shell attacks
QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain.
Our Latest Articles
The Real Vulnerability Is What Attackers Leave Behind
21 min agoThe Quiet Cost of Ignored Vulnerabilities
1 day ago
The Same Failure Keeps Sliding Through the Patch Pipe
3 days agoExploitable Flaws Are Now the Main Attack Surface
3 days ago