Microsoft confirmed on May 14 that CVE-2026-42897 — a cross-site scripting flaw in the Outlook Web Access component of Exchange Server 2016, 2019, and Subscription Edition — is under active ...

Microsoft rushes to mitigate the new “YellowKey” flaw that may bypass BitLocker protections and expose encrypted Windows ...

PoC code has been released for DirtyDecrypt, a recently patched Linux kernel vulnerability allowing privilege escalation to ...

Shares of Cenovus Energy (CVE) have been strong performers lately, with the stock up 26.7% over the past month. The stock hit a new 52-week high of $31.68 in the previous session. Cenovus has gained ...

Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN ...

Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.

Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data theft ...

CVE was built to track code flaws with fixes. It’s now being stretched to cover malware and supply chain incidents that don’t ...

Threat actors are exploiting CVE-2026-42945, a critical NGINX vulnerability that leads to remote code execution if ASLR is ...

Fragnesia CVE-2026-46300 corrupts Linux page cache via XFRM ESP-in-TCP, enabling local root access on major distros.