exploited

Two code injection vulnerabilities allowed unauthenticated attackers to execute arbitrary code and access sensitive…

eSecurity Planet content and product recommendations are editorially independent. We may make money when…

A cyberattack by Russian state-sponsored threat actors that targeted at least 30 wind and…

The company advises triaging logs with the ^(?!127\.0\.0\.1:\d+ .*$).*?\/mifs\/c\/(aft|app)store\/fob\/.*?404 regular expression and looking for…

Ravie LakshmananJan 30, 2026Vulnerability / Enterprise Security Ivanti has rolled out security updates to…

Threat actors have been actively exploiting a critical vulnerability in React Server Components, tracked…

Microsoft has released an out-of-band security update for Office products to address CVE-2026-21509, a…

Microsoft has released an emergency fix for an actively-exploited zero-day vulnerability affecting Microsoft Office.…

Ravie LakshmananJan 24, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency…

Ravie LakshmananJan 23, 2026Vulnerability / Software Security The U.S. Cybersecurity and Infrastructure Security Agency…