ThreatVectr

Vulnerabilities — Page 20

A collection of device screens—laptop, tablet, smartphone—each displaying a security patch notification downloading simultaneously, with progress bars advancing
Vulnerabilities

Microsoft and Apple Rush Out Patches for Flaws That Let Attackers In Without a Password

Several of the Microsoft bugs score a perfect 10 out of 10 for severity. Apple quietly fixed a flaw that lets someone access your screen without logging in.

3 min read
A browser window showing the Chrome update notification center with multiple critical security patches listed, and system processes running in the background to
Vulnerabilities

Google Patches 41 Security Flaws in Chrome 151, Six Rated Critical

The latest Chrome update fixes a cluster of memory-safety bugs that could let attackers crash your browser or run malicious code on your device. Here is what happened and what you should do.

3 min read
A security operations center dashboard overwhelmed with thousands of vulnerability alerts and scan results covering every inch of multiple monitors, with a mana
Vulnerabilities

The Security Metric That Lies: Why Knowing Your Vulnerabilities Is Not the Same as Reducing Your Risk

Security teams are drowning in vulnerability reports yet still can't answer the one question that matters: are we actually harder to attack today than we were last year? The old way of measuring risk is the problem.

4 min read
Nested virtual machine architecture diagram visualized on a screen, with a glowing vulnerability path shown breaking through from the innermost guest layer to t
Vulnerabilities

Zapscape flaw in Linux KVM lets a rogue guest break out to the host

A newly disclosed bug in the Linux kernel's virtualization layer, tracked as CVE-2026-64561, could let an attacker inside a nested virtual machine reach the physical server underneath.

3 min read
A network operations center displaying SD-WAN infrastructure diagrams with twelve vulnerability indicators highlighted across the topology, three of them marked
Vulnerabilities

Cisco Patches a Dozen Flaws in SD-WAN and IOS XE, Three Rated Critical

An internal Cisco security review turned up 12 vulnerabilities, including three with a severity score of 9.8 out of 10, in software that runs corporate networks worldwide.

3 min read
A CPU microarchitecture diagram showing branch predictor logic with interrupts and kernel defenses visualized, a technical illustration showing the exploit wind
Vulnerabilities

Researchers Sneak Past Spectre v2 by Slipping Between the Kernel's Own Defenses

MIT CSAIL's 'Interrupt Injection' technique re-poisons the branch predictor in the tiny window after the CPU cleans it and before Linux uses it.

4 min read
Industrial control system screens for energy and water infrastructure running on displays, with a MongoDB database version number from 2020 visible in the syste
Vulnerabilities

ABB Ability Zenon ships with a MongoDB version that hasn't been patched since 2020

Industrial software used in energy and water plants bundles an old database carrying flaws that can leak memory and sidestep access controls.

3 min read
A security operations center with multiple monitors displaying vulnerability alerts and threat indicators, operators with overwhelmed expressions working throug
Vulnerabilities

The Window Between a New Vulnerability and an Active Attack Is Getting Shorter

Security teams are buried in alerts while attackers move faster than ever. The real problem isn't a shortage of warnings. It's knowing which ones actually matter before criminals act on them.

3 min read
A flowchart or process diagram displayed on a whiteboard or monitor showing five distinct phases, with only the first phase completed and checked while the rema
Vulnerabilities

Most companies understand CTEM. Almost none of them can run it.

Knowing the five phases of Continuous Threat Exposure Management is the easy part. Building a system that actually proves your defences are improving is where programmes fall apart.

4 min read
A Safari browser window showing a website on one side with network traffic visualization on the other, revealing an IP address that should be hidden by a privac
Vulnerabilities

iCloud Private Relay Has a Leak: Researchers Show How Safari's Privacy Shield Can Spill Real IPs

A flaw in how Apple's WebKit handles certain web requests lets sites see the IP address Private Relay was meant to hide.

3 min read
A cryptocurrency wallet application interface displayed on a phone screen, with recovery phrase generation happening in the background, and a weak random number
Vulnerabilities

A 12-year-old flaw in a popular crypto library drained $5.7 million from wallets

Security firm Coinspect traced a wave of wallet thefts to a weak random number generator inside CryptoJS, a JavaScript library used by five cryptocurrency wallet apps to create recovery phrases.

4 min read
A security team reviewing patched systems on monitors, with some systems showing green checkmarks for completion but red warnings for unverified fixes, demonstr
Vulnerabilities

Patched Doesn't Mean Safe: Why Security Teams Need to Test After They Fix

A new survey of 750 security leaders finds that fewer than one in three organisations check whether a fix actually stopped an attacker. The gap between completing work and reducing risk is where breaches still happen.

4 min read
A Cisco firewall management console displayed on a security operations center monitor, showing the vulnerability notification and severity rating of 10
Vulnerabilities

Cisco Patches 24 Flaws, Including a Perfect-Score Bug That Hands Attackers Full Control

A flaw in Cisco's firewall management software scores a rare 10 out of 10 on the severity scale, meaning a remote attacker needs no password to take complete control of an affected system.

3 min read
A close-up of a developer's desk with multiple monitors displaying code and warning alerts, with a red notification banner visible on the central screen, urgent
Vulnerabilities

Hackers Are Actively Exploiting a Critical Flaw in JetBrains TeamCity

A software tool used by thousands of development teams has a severe security hole that attackers are already using. The US government is giving federal agencies three days to fix it.

3 min read
A web application login page displayed on a monitor with a padlock icon, while in the background a network diagram shows multiple breach points, red lines indic
Vulnerabilities

Why Modern Hackers Walk In Through the Front Door of Your Website

Security teams have spent years locking up their networks and servers. A new wave of attacks shows that criminals are now coming in through web applications instead, and most defences are not keeping up.

3 min read
© 2026 Threat Vectr