Browsing: Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a WordPress flaw, tracked as CVE-2026-119977 (CVSS score of 8.1), to its Known Exploited Vulnerabilities (KEV) catalog.

The memory overflow vulnerability could lead to a denial-of-service condition under certain circumstances.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos:

Cybersecurity and Infrastructure Security Agencyis warning that this CVE numbered vulnerability (CVE-2026-19490) which has a CVSS score of 9.3, has been exploited, following an alert posted last week byPrevidianfounder and former WatchTowr head of threat intelligenceRyan Dewhurst. The defect affects all NetScaler ADC and NetScaler Gateway appliances configured as a gateway or an AAA virtual…

The Cybersecurity and Infrastructure Security Agency (CISA) on Sept. 9 confirmed that an out-of-bounds write bug in WatchGuard Firebox that CISA added to the Known Exploited Vulnerabilities (KEV) catalog in December was now being used in ransomware campaigns.While security pros said the timeframe from disclosure to added to the KEV and then exploited by ransomware…

State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (FMC), which is used for centrally managing multiple Cisco Secure Firewall devices across a network.

The collaboration software’s developer took almost a full month to patch the flaw after disclosing it.

A serious vulnerability in Apple’s macOS Screen Sharing service is being actively exploited to compromise internet-connected Macs, obtain root-level access and install Monero cryptocurrency miners, according to an urgent warning from the Netherlands’ National Cyber Security Centre.

The Dutch National Cyber Security Centre confirmed active exploitation of a critical macOS authentication flaw, tracked as CVE-2026-65400 (CVSS score of 9.8), less than two weeks after Apple shipped the fix.