The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

Adobe issued June 2026 security updates for ColdFusion and Campaign Classic to resolve half a dozen maximum severity vulnerabilities.

CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution ...

ColdFusion 2023 Update 21, 2025 Update 10, and ACC v7 build 9397 fix code execution bugs; no exploits reported.

Buffer overflow vulnerabilities have driven remote code execution for decades and keep appearing in critical network ...

Sentire says attacks began June 29 against a CVSS 9.6 OS command injection flaw that enables unauthenticated code execution.

Microsoft's prediction that attackers probably wouldn't rush to exploit a newly-patched SharePoint bug hasn't aged especially ...

Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform ...

Nearby attackers can crash Apple's AirDrop before users see a file transfer request, temporarily disabling AirPlay, Handoff, ...

What happened CISA added a Cisco Unified Communications Manager Server vulnerability to its Known Exploited Vulnerabilities catalog after the flaw was observed being exploited in attacks. The ...

The National Cyber Security Agency (Nacsa) says that several government websites, including those of the Health Ministry (MOH ...

The National Cyber Security Agency (Nacsa) says that several government websites, including those of the Health Ministry (MOH), Malaysia Co-operative Societies Commission, Handicraft Development ...