D-Link warned customers of a maximum-severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch, affecting legacy DIR-822A dual-band Wi-Fi routers.

CISA added Zyxel CVE-2026-7273 to KEV after active exploitation, while Arctic Wolf reported attacks on a Veeam Windows flaw.

Networking and hardware manufacturer D-Link is alerting consumers of a maximum-severity zero-day flaw found in one of its ...

A threat actor has exploited CVE-2026-7273 in unpatched ZyXEL GS1900 Smart Managed Switches and has exfiltrated sensitive data.

Broadcom patched two VMware Workstation and Fusion flaws that let local VM administrators execute code on the host; no exploitation is known.

Attackers are now actively exploiting a high-severity vulnerability in Zyxel GS1900 series switches, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA).

Nintendo is warning about a security flaw in the first-gen Switch console related to the feature that lets you send game screenshots to a smartphone. It turns out you can hack the function to ...

SAP hat insgesamt 22 Security Notes veröffentlicht, darunter fünf HotNews-Einträge. Die schwerwiegendste Schwachstelle – intern OVERPASS genannt, geführt als CVE-2026-44756 – betrifft die Verarbeitung ...

Hacktron AI’s three-person team breached OpenAI’s private code repository by chaining a libheif image-parsing flaw with ...

Microsoft’s record September Patch Tuesday fixes 974 vulnerabilities, including two exploited zero-days. Here’s what IT teams should prioritize.

Microsoft Patch Tuesday September 2026 set a record with 966 vulnerabilities patched, but security analysts say an unauthenticated Exchange Server remote code execution flaw and 20 wormable bugs ...