ThreatVectr

Vulnerabilities — Page 15

Close-up overhead view of a modern Android smartphone lying face-up on a dark matte desk, its screen glowing with a soft blue-white light, surrounded by faint a
Vulnerabilities

A Weaponised SVG File Let Researchers Run Commands on Bing's Own Servers

Security testers at XBOW uploaded a booby-trapped image to Bing's image search and ended up with full control over Microsoft's image-processing machines. Two critical patches followed.

3 min read
Full-frame photoreal editorial image of a modern enterprise data centre corridor at night, glowing amber server indicator lights reflecting off a polished floor
Vulnerabilities

Redis Patches Four Code-Execution Bugs After AI Agent Finds Zero-Days

Seven security releases went out on July 23 after researchers used Moonshot AI's Kimi K3 agents to uncover authenticated remote code execution chains in stock Redis builds.

3 min read
Photoreal news-editorial shot of a stack of rack-mounted network appliances in a dim server room, faint amber status LEDs reflecting off polished floor tiles, s
Vulnerabilities

AI Scanner Finds Eight Serious Bugs in NodeBB Forum Software

Aikido Security's automated code review turned up admin takeover and private-message flaws in six hours. All eight are patched in version 4.14.2.

3 min read
A visual representation of a digital storm hitting a Drupal logo, symbolizing a security vulnerability
Vulnerabilities

CISA orders three-day fix as Clop hits PTC Windchill flaw

A critical bug in PTC's product design software, CVE-2026-12569, is being used by the Clop extortion crew to steal corporate data. Regulators in the US and Germany moved fast.

4 min read
Full-frame photoreal editorial shot of a dimly lit server room with a single rack unit highlighted by a red status LED, blurred network cables in the foreground
Vulnerabilities

Check Point's Admin Console Has a Critical Flaw That Hands Attackers the Keys to Everything

A security hole in Check Point's management software lets criminals walk in without a password and rewrite the rules of an entire network. Ten organisations have already been hit.

4 min read
Photoreal editorial shot of a dense server rack in a cool-lit data centre, rows of blinking green and amber status LEDs, one rack panel showing a faint red warn
Vulnerabilities

A Hidden Linux Flaw Lets Any Local User Seize Full Control of a Machine

A race condition buried in the Linux XFS filesystem since 2017 can hand a regular user complete administrative control. Patches are out. Reboots are required.

4 min read
Photoreal news-editorial image of a darkened enterprise server rack with one rack unit displaying a red status LED, others showing amber and green, shallow dept
Vulnerabilities

Can You Still Patch Your Way to Safety? Why the Old Playbook Is Breaking Down

Artificial intelligence can now turn a published vulnerability description into a working attack in under a day. That changes the math for every organisation relying on traditional patch schedules.

3 min read
Photoreal editorial shot of a laptop screen glowing in a dim office, showing a generic webmail inbox interface with one email highlighted, faint reflection of c
Vulnerabilities

Russian Hackers Are Reading Your Email Just by Sending You One: Zimbra Zero-Day Explained

A Kremlin-linked crew tracked as LAUNDRY BEAR is exploiting CVE-2025-66376 in Zimbra webmail to steal 90 days of email the moment a victim opens a booby-trapped message.

4 min read
Aerial view of a large industrial fuel storage facility at dusk, rows of cylindrical metal tanks reflecting low amber light, pressure gauges and pipe networks v
Vulnerabilities

Old Linux Bug 'RefluXFS' Hands Root to Anyone With a Shell on Default Red Hat Servers

A nine-year-old flaw in how Linux handles the XFS filesystem lets any local user become the all-powerful root account on default installs of Red Hat, Fedora and Amazon Linux.

3 min read
A server rack in a dimly lit data center, glowing amber and blue indicator lights reflecting off brushed-metal chassis surfaces, shallow depth of field on the f
Vulnerabilities

Hackers Are Actively Exploiting a Flaw in Check Point Security Software

A newly discovered hole in Check Point's network management tools let attackers log in as administrators without a password. Real attacks were already happening before the patch arrived.

3 min read
Full-frame photoreal editorial shot of a laptop screen showing a generic file-archive dialog with a compressed folder icon highlighted, warm desk lamp light, ou
Vulnerabilities

Check Point Rushes Fix for SmartConsole Flaw Already Being Exploited

A critical authentication bypass in Check Point's management console let attackers waltz past the login screen. The vendor confirms real-world attacks are already happening.

3 min read
Photoreal news-editorial shot of a rack of white networking access points and small gateway boxes mounted on a modern office ceiling, soft cool blue LEDs glowin
Vulnerabilities

What is a CVE and how does vulnerability scoring work?

CVEs are the universal ID system for software flaws, and CVSS scores tell you how bad each one actually is.

5 min read
Full-frame photoreal editorial image of a dimly lit enterprise server room with rows of blue-lit rack units, one cabinet door open showing status LEDs, faint re
Vulnerabilities

What is a zero-day vulnerability? A plain-English guide

Zero-days are unpatched security flaws the software vendor doesn't know about yet, making them among the most dangerous bugs in existence.

5 min read
Full-frame photoreal editorial image of a dimly lit server rack in a corporate data centre, blue and amber status LEDs glowing, one server unit slightly pulled
Vulnerabilities

Microsoft Wants You to Patch in Three Days. Security Teams Say That's Not How It Works.

Microsoft is telling IT administrators to apply security fixes within 72 hours, citing AI tools that find and exploit software flaws faster than ever. Experts agree on the threat. They disagree, sharply, on whether three days is workable.

4 min read
A dynamic, digital visualization of open source code intersecting with AI technology, symbolizing cybersecurity and vulnerability management
Vulnerabilities

Fake Bahrain Alert App Spreads Android Surveillance Malware

A fake emergency alert app targets users with sophisticated spying tools.

2 min read
© 2026 Threat Vectr