Content Paint

vulnerabilities

Microsoft 365 0day exploited: No full patch yet

Registry key chaos ftw...

Oracle warns over easily exploitable CVSS 10 bug

Unpatched Fusion Middleware is how Oracle itself got hacked…

ServiceNow AI vulnerability: Hardcoded password helped make anyone admin

Spin up rogue AI agents? All it took was a knowing an email address...

Critical HPE bug exploited: Backdoor, or bad security testing?

Just an undocumented utility API exposed on a public management port without an active session requirement giving an attacker access to all your servers then?

A CVE explosion - and the lessons from it

8,000+ XSS bugs

MongoBleed exploitation: Community rallies to deliver detection logic, tools

Detection "requires somewhat complex logic which could be tricky to port into most SIEM detection engines..."

Critical Cisco vulnerability exploited. No patch yet. Attackers gain persistence

A technical support case revealed a remote exploit of web-exposed spam quarantine management to gain root.

React2Shell exploits are going “wild” and even Microsoft is struggling

14 million attack attempts an hour says Cloudflare

December's Patch Tuesday brings an 0day - and prompt injection warnings

Microsoft patched 1,139 vulnerabilities in 2025. This month, look out for...

Search the site

Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Your link has expired. Please request a new one.
Great! You've successfully signed up.
Great! You've successfully signed up.
Welcome back! You've successfully signed in.
Success! You now have access to additional content.