CISA has warned Fortinet customers to secure their FortiGate devices. The warning follows a large campaign called FortiBleed. The campaign targets Fortinet devices that are exposed to the internet. These devices include firewalls and VPN…

Apple has released a security update for Beats Studio Buds. The update fixes a serious Bluetooth flaw. The flaw is tracked as CVE-2025-20701. It affects the Bluetooth pairing process. As a result, a nearby attacker…

F5 has released security updates for NGINX Open Source. The patches fix two critical flaws that could create serious risk for affected systems. The two flaws are CVE-2026-42530 and CVE-2026-42055. Both have a CVSS v4…

Top 10 Attack Surface Exposures in 2026 Cyberattacks in 2026 do not always start with advanced zero-day exploits. Many attacks begin with simple security gaps. These gaps include exposed admin panels, weak credentials, open databases,…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity LiteSpeed cPanel Plugin vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, tracked as CVE-2026-54420, is being actively exploited and could allow…

Critical WP Maps Pro Flaw Exploited to Create Admin Accounts on WordPress Sites A critical WP Maps Pro flaw is now being actively exploited by attackers to create administrator accounts on vulnerable WordPress websites. The…

FortiClient EMS Vulnerability Exploited to Deploy EKZ Infostealer A critical FortiClient EMS vulnerability has been exploited by threat actors to deliver a credential stealing malware known as EKZ Infostealer. The flaw is tracked as CVE-2026-35616.…

Gitea Vulnerability Exposes Private Container Images Without Authentication A serious Gitea vulnerability has raised concern for teams that use self hosted Git and container registry systems. The flaw, tracked as CVE 2026 27771, allowed unauthenticated…

The Laravel Lang supply chain attack has become an important warning for PHP and Laravel developers. In this incident, several community maintained Laravel Lang packages were compromised and used to deliver credential stealing malware. This…

A new Linux security issue called Dirty Frag is raising serious concerns in the cybersecurity community. The attack chain involves two vulnerabilities tracked as CVE-2026-43284 and CVE-2026-43500. Together, these flaws can allow a local attacker…