Roundcube Webmail administrators are being pressed to install emergency updates after maintainers fixed a set of security flaws that could expose email systems to database manipulation, script ...

Attackers are actively exploiting a critical Cisco Unified CM SSRF vulnerability, tracked as CVE-2026-20230, to plant persistent webshells on exposed servers. Tor-anonymised sweeps began around June ...

Switchzilla amid reports of new serious vulnerabilities under attack. First up is a server-side request forgery bug in its Unified Communications Manager tracked as CVE-2026-20230. Cisco disclosed and ...

Cisco Unified CM CVE-2026-20230 is under active exploitation, allowing file writes on WebDialer-enabled systems.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

A newly discovered Microsoft Copilot vulnerability enables hackers to access your email and other data. Credit: Thomas Trutschel/Photothek via Getty Images It seems no matter how many safeguards are ...

The flaw, CVE-2026-35273, carries a CVSS severity score of 9.8 out of 10 and enables a remote attacker to execute arbitrary code on a PeopleSoft server without supplying any credentials. No password.

One of the world’s most active ransomware groups exploited a critical vulnerability in Oracle’s PeopleSoft software suite and used it to target about 100 customers and extort at least one of them to ...

Cisco disclosed a critical server-side request forgery vulnerability in its Unified Communications Manager platform on Wednesday, and by Thursday morning working proof-of-concept exploit code was ...

A critical vulnerability has been discovered in Angular Server-Side Rendering (SSR) that could allow attackers to manipulate request handling and trigger unauthorized server-side requests. Tracked as ...

OpenClaw has patched six new vulnerabilities in its popular agentic AI assistant, covering server-side request forgery (SSRF), missing authentication and path traversal bugs, according to Endor Labs.