If your organization runs a self-hosted GitLab instance, stop what you are doing and check your version. A maximum-severity path traversal vulnerability, CVE-2026-85706 (CVSS 10.0), is being actively exploited in the wild, and the window…
If you manage Cisco Secure Firewalls through a Firewall Management Center (FMC) appliance, stop what you're doing and check your patch status. A maximum-severity authentication bypass — CVE-2026-20079, CVSS 10.0 — is being actively exploited…
Google shipped an emergency Chrome update on September 4, 2026, to close a zero-day vulnerability that attackers are already using against real targets. If you use Chrome — and roughly 69% of the web does…
CISA Adds Critical Gitea RCE (CVE-2026-60004) to KEV Catalog as Active Attacks Drop Cryptominers CISA has added CVE-2026-60004 to its Known Exploited Vulnerabilities catalog. This is a CVSS 9.8 remote code execution flaw in Gitea,…