PaperCut releases second emergency patch for exploited flaws

PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes.

• Lawrence Abrams
• August 28, 2026
• 03:08 PM
• 0

PaperCut warns of NG, MF flaw exploited in zero-day attacks

PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks.

• Lawrence Abrams
• August 27, 2026
• 12:31 PM
• 0

Webinar: How AI broke the Pyramid of Pain

The Pyramid of Pain works on the core idea that the higher your detections are up the pyramid, the harder you are to evade. But AI has collapsed the value of the bottom layers to zero.

The latest webinar from Push Security explains how this change impacts detection and response, and what security teams can do about it.

• Push Security Sponsorship

Cisco warns of FMC static credential flaw exploited in zero-day attacks

Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.

• Lawrence Abrams
• July 29, 2026
• 05:35 PM
• 0

Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices.

• Lawrence Abrams
• June 24, 2026
• 05:29 PM
• 1

FreePBX servers hacked via zero-day, emergency fix released

The Sangoma FreePBX Security Team is warning about an actively exploited FreePBX zero-day vulnerability that impacts systems with the Administrator Control Panel (ACP) is exposed to the internet.

• Lawrence Abrams
• August 27, 2025
• 03:36 PM
• 1

WinRAR zero-day exploited to plant malware on archive extraction

A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware.

• Lawrence Abrams
• August 08, 2025
• 04:42 PM
• 0

Microsoft releases emergency patches for SharePoint RCE flaws exploited in attacks

Microsoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770 and CVE-2025-53771 that have compromised services worldwide in "ToolShell" attacks.

• Lawrence Abrams
• July 21, 2025
• 12:41 AM
• 1

Fortinet fixes critical zero-day exploited in FortiVoice attacks

Fortinet released security updates to patch a critical remote code execution vulnerability exploited as a zero-day in attacks targeting FortiVoice enterprise phone systems.

• Sergiu Gatlan
• May 13, 2025
• 12:46 PM
• 1

Ivanti warns of new Connect Secure flaw used in zero-day attacks

Ivanti is warning that a new Connect Secure remote code execution vulnerability tracked as CVE-2025-0282 was exploited in zero-day attacks to install malware on appliances.

• Lawrence Abrams
• January 08, 2025
• 03:43 PM
• 1

Oracle warns of Agile PLM file disclosure flaw exploited in attacks

Oracle has fixed an unauthenticated file disclosure flaw in Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files.

• Lawrence Abrams
• November 19, 2024
• 02:56 PM
• 0