ThreatVectr

Vulnerabilities — Page 8

A pair of small wireless earbuds sitting on a desk with a smartphone displaying Bluetooth connection settings nearby, surrounded by concentric RF signal waves i
Vulnerabilities

Skullcandy Dime 3 earbuds let strangers pair over Bluetooth with no PIN, and owners can't patch them

A flaw in the Airoha chip inside Skullcandy's popular Dime 3 earbuds lets anyone nearby connect silently and listen through the microphone. Skullcandy has a fix, but no way for customers to install it.

4 min read
A cybersecurity operations center with Cisco Secure Firewall Management Center interface displayed on a large screen, a perfect 10
Vulnerabilities

Cisco firewall manager flaw rated 10 out of 10 is under active attack

A perfect-score bug in Cisco's Secure Firewall Management Center lets attackers take full control without a password. Evidence suggests exploitation started weeks before Cisco confirmed it.

4 min read
A network infrastructure diagram showing Fortinet firewall and switch devices infected with remote-control malware, attack vectors highlighted in red, with gove
Vulnerabilities

Hackers Are Exploiting a Fortinet Flaw to Plant Remote-Control Malware on Network Devices

A security bug in Fortinet's firewall and switch software is being used to silently take over devices and steal data. More than 178 machines are already infected, attacks have been running since at least July 2026, and the US government is telling federal agencies they have three days to patch.

3 min read
A network operations center displaying thousands of WatchGuard firewall devices on a map, critical unpatched devices highlighted in red, ransomware attack alert
Vulnerabilities

Ransomware Crews Now Hitting Unpatched WatchGuard Firewalls, CISA Warns

A critical flaw in WatchGuard Firebox firewalls, patched in December, is now being used in ransomware attacks. Close to 9,000 devices remain exposed online.

3 min read
Federal cybersecurity operations center with urgent alert banners across multiple screens displaying NetScaler vulnerability information, patch deployment timel
Vulnerabilities

CISA Warns of Active Attacks on Critical NetScaler Flaw

Federal agencies have three days to patch CVE-2026-19490 after CISA confirmed criminals are actively exploiting the high-severity flaw in Citrix's widely used network gateway software.

3 min read
A corporate network security gateway or firewall device being examined, with critical vulnerability alerts displayed on adjoining monitors showing password bypa
Vulnerabilities

Check Point Fixes Two Critical VPN Flaws That Could Let Hackers In Without a Password

Both bugs score 9.8 out of 10 and affect the firewall gear that guards corporate networks.

3 min read
An Excel spreadsheet with cells highlighted and formulas being dragged, the action suddenly failing with error notifications appearing, a recent update timestam
Vulnerabilities

Microsoft's Latest Excel Security Patch Is Breaking Copy-Paste for Users

The KB5002914 update, released this week, is stopping people from copying cells and dragging formulas. Uninstalling the patch fixes it.

4 min read
A network security operations center at night, multiple screens displaying cascading alerts and breach notifications in red, with code and targeting information
Vulnerabilities

Russian-Speaking Attacker Turned AI Agents Loose on PaperCut, Hit 395 Organisations in Days

Hundreds of AI agents built exploits, picked targets and broke into schools and businesses across 48 countries. One US high school went from first contact to full takeover in seven minutes.

3 min read
A timeline visualization from mid-August to early September showing two vulnerability chains being exploited, unpatched server icons turning red as backdoors ar
Vulnerabilities

Hackers Chain Two JFrog Artifactory Bugs to Plant Backdoors on Unpatched Servers

Wiz tracked the attacks from August 15 to September 8. Both flaws were already fixed. Servers that skipped the update paid the price.

3 min read
A server room with one machine marked with warning tape, its directory structure displayed on an adjacent monitor showing file path traversal routes exposed
Vulnerabilities

GitLab Rushes Out Fixes for Two Critical Server Flaws, One Lets Strangers Read Private Files

A path traversal bug and a second critical flaw in GitLab's enterprise product prompted an urgent patch call for self-hosted installations.

3 min read
Print servers in a network rack with update notifications displaying across connected workstations, version numbers changing from patches to full releases
Vulnerabilities

PaperCut Rolls Out Full Fix for Two Print-Server Flaws Already Under Attack

The vendor replaced its earlier emergency patches with proper maintenance releases across three supported branches.

3 min read
A network operations center with multiple security monitoring screens displaying alerts and warnings, three different product logos or interface elements visibl
Vulnerabilities

CISA flags five actively exploited flaws in Artifactory, ScreenConnect and MikroTik gear

The U.S. cyber agency says criminals are already breaking into systems through bugs in three widely used products, and federal agencies must patch fast.

3 min read
A Windows Server environment with Remote Desktop windows frozen mid-session, spinning loading indicators, and administrators' faces showing frustration as they
Vulnerabilities

Microsoft's September patches are knocking Remote Desktop offline

Admins across Windows Server and Windows client versions report frozen sessions, hung sign-ins and unresponsive tools after installing this month's updates.

4 min read
A web browser showing a Vite development server directory listing exposed online, AWS and Azure credential strings visible in configuration files, scanner outpu
Vulnerabilities

Attackers Are Scanning Exposed Vite Dev Servers to Steal AWS and Azure Keys

A month-long campaign hunted cloud credentials on internet-facing Vite servers using a file-read bypass disclosed in April.

3 min read
A Telegram chat window on a desktop with an HTML export file icon visible, JavaScript code flowing from the HTML file toward a message history folder in the fil
Vulnerabilities

Telegram Desktop bug let a hidden script steal chats from saved conversations

Researchers at ExPatch showed how a single bot message could hide JavaScript inside an HTML chat export, then quietly copy every message when the file was opened.

3 min read
© 2026 Threat Vectr