Remote attackers could trigger the critical-severity flaw to access privileged internal functionality.

The post Arista Urges Immediate Patching of Exploited VCO Zero-Day appeared first on SecurityWeek.

Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution.

The post Critical F5 BIG-IP Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.

Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.

The post Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day appeared first on SecurityWeek.

Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.

The post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.

An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.

The post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek.

Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments.

The post BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days appeared first on SecurityWeek.

Administrators are advised to check their deployments for newly created user accounts they don’t recognize.

The post N-able Patches Critical Zero-Day in N-central appeared first on SecurityWeek.

The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges.

The post Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits appeared first on SecurityWeek.

Google’s Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8 engine.

The post Google Patches 6th Chrome Zero-Day of 2026 appeared first on SecurityWeek.

The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution.

The post SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks appeared first on SecurityWeek.

CISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog.

The post PaperCut Exploitation Escalates to Active Intrusions appeared first on SecurityWeek.

Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product.

The post Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit appeared first on SecurityWeek.

PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.

The post More Details Emerge on Exploited PaperCut Vulnerabilities appeared first on SecurityWeek.

A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations.

The post PaperCut Releases Emergency Patch for Exploited Zero-Day appeared first on SecurityWeek.