Vulnerabilities & Patching

CVEs, exploits, SBOMs, and patch prioritization and virtual patching guides.

  • 4 Tracked terms
  • Last 30 days Feed window

What this topic collects on

An article joins this feed when it matches these terms. Each one is also a search of its own.

Latest in Vulnerabilities & Patching


medium.com > @techrefreshing02 > anonsurf-6-0-in-parrot-os-7-4-whats-new-in-this-major-linux-privacy-upgrade-f15a21b2e6ba

AnonSurf 6.0 in Parrot OS 7.4: What’s New in This Major Linux Privacy Upgrade?

10+ hour, 9+ min ago   (672+ words) Online privacy is becoming increasingly important, especially for Linux users who want more control over how their internet traffic is handled. Parrot OS has long included tools aimed at security researchers and privacy-conscious users, and one of its best-known privacy…...


helpnetsecurity.com > 10/05/2026 > exchange-server-vulnerability-cve-2026-96940

Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)

15+ hour, 55+ min ago   (248+ words) Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but “does not allow access across…...


ibtimes.sg > fortimail-zero-day-cve-2026-104286-under-attack-no-patch-yet-94641

FortiMail Zero-Day CVE-2026-104286 Is Under Attack With No Patch Yet

1+ day, 16+ hour ago   (549+ words) Fortinet's FortiMail customers have an unusual security problem this week: a critical vulnerability is already being exploited, but there is still no fixed build to install across the affected release branches. "A path traversal vulnerability in FortiMail could allow an…...


cryptobreaking.com > zano-exploiter-minted-over-1

Zano Exploiter Minted Over 1 Quadrillion fUSD Before Rollback

3+ day, 17+ hour ago   (319+ words) Zano has published a post-mortem detailing how an attacker exploited a “Gateway Address” vulnerability over the past month—producing tens of millions of...


aol.com > articles > cops-may-found-way-around-181530000.html

Cops May Have Found a Way Around One of Apple’s Toughest iPhone Security Features - AOL

4+ day, 7+ hour ago   (429+ words) Cops May Have Found a Way Around One of Apple’s Toughest iPhone Security Features AOL.com The latest round of the ongoing cat-and-mouse game between Apple and the cops has seemingly gone to the cat. According to a report from…...


9to5mac.com > 10/01/2026 > graykey-maker-can-reportedly-bypass-the-iphones-inactivity-reboot-security-feature

GrayKey maker can reportedly bypass the iPhone???s???Inactivity Reboot???

4+ day, 4+ hour ago   (540+ words) As reported by 404 Media, Magnet Forensics says it has found a way to bypass the iPhone security feature that automatically reboots devices if they haven’t been unlocked for 72 hours. Here are the details. Nearly two years ago, the iOS 18.1 update…...


gadgetreview.com > leaked-video-claims-graykey-tool-may-preserve-iphones-unlocked-forensic-state

Leaked Video Claims GrayKey Tool May Preserve iPhone's Unlocked Forensic State

4+ day, 8+ hour ago   (769+ words) Magnet Forensics video claims GrayKey Preserve keeps seized iPhones in an accessible state even after iOS 18.1 reboots Apple built the 72-hour inactivity reboot into iOS 18.1 to push unattended iPhones into a harder-to-crack security state. A leaked training video obtained by…...


404media.co > cops-can-bypass-iphone-automatic-inactivity-reboot-graykey

Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims

4+ day, 9+ hour ago   (524+ words) A company that makes phone hacking devices claims to have developed a solution that freezes iPhones in a state that lets cops more easily access sensitive data inside them, according to a video obtained by 404 Media. This is the latest…...


coininsider.org > news > kelpdao-sues-layerzero-over-292m-exploit

KelpDAO Sues LayerZero Over $292M Exploit

1+ week, 1+ day ago   (463+ words) KelpDAO has sued LayerZero Labs and co-founder and CEO Bryan Pellegrino over the April exploit that drained 116,500 rsETH, worth about $292 million at the time. Evercrest Technologies, the legal entity behind Kelp, filed the civil claim in British Columbia on Sept....


kucoin.com > news > flash > kelpdao-parent-sues-layerzero-over-292m-rseth-bridge-exploit

KelpDAO Parent Sues LayerZero Over $292M rsETH Bridge Exploit

1+ week, 2+ day ago   (485+ words) LayerZero faces a lawsuit from KelpDAO’s parent company over the April 18 rsETH bridge exploit, escalating their dispute over responsibility. Evercrest Technologies alleges security failures enabled attackers to steal 116,500 rsETH, worth approximately $292 million at the time. Evercrest filed its notice of…...