Exploited before the patch exists.
An article joins this feed when it matches these terms. Each one is also a search of its own.
Strip the advisory language and CVE-2026-0321 is a straightforward proposition. An outsider with a network path to a PAN-OS dataplane interface can make a firewall stop forwarding, and can make it stay stopped. The three prerequisites The CVE Record, published…
Palo Alto Networks shipped a cluster of advisories in mid-October 2026, and CERT-FR bundled them into advisory CERTFR-2026-AVI-1326. Reading the batch as one event hides the differences that matter for triage. The batch at a glance CVE-2026-0311 and CVE-2026-0312 land…
We couldn't find any blog articles matching your search. Try searching for other cybersecurity topics or keywords. Okta also fixed CVE-2026-115546, an 8.1-rated flaw that can give a signed-in user a SAML assertion for the Admin Console. Vivek is a…
Dutch firm Eye Security used a 9.8-rated flaw in an abandoned Popcorn Time clone to switch off its updater on more than 2 million machines it did not own. Eye disclosed the flaw in June, and CISA rates it 9.8 out of…
Developers say faster-moving AI tools are prompting quicker public disclosure of some software bugs, raising pressure on node operators to update promptly. Bitcoin Core developers are changing how they handle bug disclosure. Some vulnerabilities will now be made public sooner…
Cybersecurity researchers have uncovered a new UEFI bootkit that can bypass Windows Secure Boot even on fully patched computers when administrators have not completed an additional manual security step. The malware, called BlackX, was discovered by Kaspersky during an espionage…
Kaspersky researchers Georgy Kucherin, Vladimir Nestor and Vasily Berdnikov said the actor "took into account that few organizations realized the importance of manually activating the Baton Drop patch" and chose to invest in rebuilding BlackLotus rather than developing a new…
Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by…
Time4Popcorn is a fork of Popcorn Time, a popular download application. This fork is also distributed under the name ‘Popcorn Time’. Since early 2025, a new project started using the PopCorn Time name and is building a legal alternative, this research does…
The abandoned Time4Popcorn update feature downloads and executes files without signature verification, running as SYSTEM on Windows and root on macOS. Researchers attempted to disable updates via over two million update downloads, but this does not indicate unique device counts or…