A critical new vulnerability, dubbed “wp2shell,” has been discovered in WordPress, one of the world’s most widely used content management systems (CMS). If successfully exploited, this flaw allows attackers to execute arbitrary code remotely (Remote Code Execution – RCE) on…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two dangerous vulnerabilities affecting the Fortinet FortiSandbox platform to its Known Exploited Vulnerabilities (KEV) Catalog. This indicates that these vulnerabilities are being actively exploited by cybercriminals in real-world attacks. According…

A newly discovered macOS information-stealing (infostealer) malware poses a serious security threat to Telegram Desktop users. According to security researchers, this malware steals Telegram Desktop’s local session files, allowing attackers to access a user’s account without requiring the password, SMS…

F5 has issued an official security advisory regarding several high-risk vulnerabilities affecting NGINX Plus and NGINX Open Source. According to security experts, successful exploitation of these vulnerabilities could result in memory corruption, denial of service (DoS), and, in certain cases,…

As part of its July 2026 Patch Tuesday security updates, Microsoft has addressed a 0-day vulnerability in Active Directory Federation Services (AD FS), tracked as CVE-2026-56155. The most concerning aspect is that Microsoft has officially confirmed that this vulnerability is…

As part of its July 2026 Patch Tuesday security updates, Microsoft has fixed a new zero-day (0-day) vulnerability affecting Windows BitLocker. Tracked as CVE-2026-50661, the flaw could allow an attacker to bypass BitLocker’s disk encryption protection and gain unauthorized access…

On July 14, 2026, Fortinet released official security advisories regarding seven new security vulnerabilities identified in its core security products — FortiOS, FortiProxy, FortiPAM, and FortiSandbox. The discovered vulnerabilities include Path Traversal, Buffer Overflow, Cross-Site Scripting (XSS), CRLF Injection, as…

Dell Technologies has released urgent security updates to address several critical vulnerabilities discovered in its PowerProtect Data Domain products. According to security experts, if successfully exploited, these vulnerabilities could allow attackers to gain complete control of affected systems remotely and…

Microsoft has released security updates to address several information disclosure vulnerabilities identified in the Windows Remote Desktop Protocol (RDP) service. If successfully exploited, these flaws could allow attackers to obtain sensitive information stored in system memory during remote desktop sessions.…

SonicWall has issued an urgent security advisory regarding two serious vulnerabilities affecting its SMA1000 Series (Secure Mobile Access) remote access appliances. Most concerning is the fact that these vulnerabilities have already been confirmed to be actively exploited by cybercriminals in…