CISA adds four critical vulnerabilities to KEV catalog for active exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their acti
Active exploit on SharePoint CVE-2026-50522 after Patch Tuesday
Microsoft SharePoint has come under attack following the publication of a public proof-of-concept for CVE-2026-50522, a critical deserialization flaw that can lead to remote code e
Roundcube, ColdFusion, SharePoint and other enterprise web stacks are under active exploitation
A major cluster of articles shows attackers moving quickly on high-value web application flaws, with CISA repeatedly adding exploited issues to its KEV catalog. Roundcube mail serv
Microsoft July 2026 Patch Tuesday hits record scale with exploited zero-days and hundreds of CVEs
Microsoft's July 2026 Patch Tuesday was one of the largest security releases in company history, with reports ranging from 570 to 622 vulnerabilities fixed depending on the co