GoKawiil - Tech News

91.

Critical Fortinet FortiSandbox flaws now exploited in attacks (bleepingcomputer.com)

2026-06-16 | get Fortinet FortiSandbox Security Appliance → | tags: fortinet, fortisandbox, cve-2026-39813

92.

A Chinese rocket breaks apart dangerously close to the Starlink constellation (arstechnica.com)

2026-06-15 | get Starlink Satellite Tracker → | tags: zhuque-2e, landspace, starlink

93.

Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks (bleepingcomputer.com)

2026-06-15 | get Cisco SD-WAN Security Kit → | tags: cisco, sd-wan, vmanage

94.

ShinyHunters Hacked 100+ Organizations By Exploiting an Oracle PeopleSoft 0-Day (slashdot.org)

2026-06-12 | get Oracle PeopleSoft Security Patch → | tags: shinyhunters, oracle peoplessoft, cve-2026-35273

95.

PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data (arstechnica.com)

2026-06-12 | get Cybersecurity Data Protection Kit → | tags: peoplesoft, oracle, cve-2026-35273

96.

Cisco warns of critical Unified CM flaw with PoC exploit code (bleepingcomputer.com)

2026-06-04 | get Cisco Unified Communications Manager → | tags: cisco unified cm, cve-2026-20230, webdialer

97.

Microsoft's New AI Image Tool Beats Nano Banana on This Key Task (cnet.com)

2026-06-03 | by See Full Bio | get Microsoft Designer → | tags: ai image generator, microsoft, nano banana

98.

Acer working to patch max severity zero-days in Wave 7 routers (bleepingcomputer.com)

2026-06-03 | get Acer Wave 7 Router Security Patch → | tags: acer, wave 7, cve-2026-49200

99.

Critical Kirki flaw exploited to hijack WordPress admin accounts (bleepingcomputer.com)

2026-06-02 | get WordPress Security Plugin → | tags: kirki, wordpress, defiant

100.

CISA flags two-year-old Oracle flaw as actively exploited in attacks (bleepingcomputer.com)

2026-06-02 | get Oracle Security Patch Kit → | tags: oracle weblogic server, cisa, cve-2024-21182

101.

Google fixes one actively exploited Android zero-day, 124 flaws (bleepingcomputer.com)

2026-06-02 | get Android Security Patch Kit → | tags: android, google, android 14

102.

Windows Server vulnerability can grant system privileges with just a malformed packet — domain controllers are being exploited in the wild (tomshardware.com)

2026-06-01 | by Bruno Ferreira | get Microsoft Windows Server Security Kit → | tags: windows server, domain controllers, cve-2026-41089

103.

WP Maps Pro bug exploited to create admin accounts on WordPress sites (bleepingcomputer.com)

2026-05-31 | get WordPress Security Plugin → | tags: wp maps pro, cve-2026-8732, wordpress

104.

10g Upgrade (news.ycombinator.com)

2026-05-30 | get 10g Network Switch → | tags: ieee 802.3ae-2002, 10g upgrade, cisco sg200-26

105.

Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks (bleepingcomputer.com)

2026-05-30 | get GlobalProtect VPN Security Patch → | tags: palo alto networks, globalprotect, pan-os

106.

Microsoft 0-day feud escalates as researcher threatens another exploit dump (news.ycombinator.com)

2026-05-29 | by Jessica Lyons | get Microsoft Security Update Kit → | tags: microsoft, nightmare eclipse, windows zero-days

107.

Hackers exploit FortiClient EMS flaw to push infostealer malware (bleepingcomputer.com)

2026-05-28 | get FortiClient EMS Security Patch → | tags: forticlient, fortinet, cve-2026-35616

108.

Wide-ranging 7-zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at risk (tomshardware.com)

2026-05-28 | by Bruno Ferreira | get 7-Zip File Archiver → | tags: 7-zip, cve-2024-xxxx, 7z binary

109.

CISA gives feds 4 days to patch actively exploited cPanel plugin flaw (bleepingcomputer.com)

2026-05-27 | get cPanel Security Patch Kit → | tags: cisa, litespeed, cpanel

110.

Millions of AI agents imperiled by critical vulnerability in open source package (arstechnica.com)

2026-05-26 | get OpenAI GPT-4 Developer Kit → | tags: starlette, fastapi, asgi

111.

KnowledgeDeliver flaw exploited as a zero-day to install web shells (bleepingcomputer.com)

2026-05-26 | get Cybersecurity Web Shell Toolkit → | tags: knowledgedeliver, cve-2026-5426, web shells

112.

BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass (news.ycombinator.com)

2026-05-26 | by D-Sec | get Starlette Web Framework Book → | tags: starlette, cve-2026-48710, host-header

113.

CISA orders feds to patch actively exploited Drupal vulnerability (bleepingcomputer.com)

2026-05-26 | get Drupal Security Patch Kit → | tags: cisa, drupal, cve-2026-9082

114.

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude (news.ycombinator.com)

2026-05-25 | get Apple MacBook Air M2 → | tags: apple, macos, cve-2026-28952

115.

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign (bleepingcomputer.com)

2026-05-24 | get SQL Injection Testing Tool → | tags: ghost cms, sql injection, cve-2026-26980

116.

Trend Micro warns of Apex One zero-day exploited in the wild (bleepingcomputer.com)

2026-05-22 | get Trend Micro Apex One Security → | tags: trend micro, apex one, cve-2026-34926

117.

Drupal: Critical SQL injection flaw now targeted in attacks (bleepingcomputer.com)

2026-05-22 | get SQL Injection Security Kit → | tags: drupal, sql injection, postgresql

118.

Max severity Cisco Secure Workload flaw gives Site Admin privileges (bleepingcomputer.com)

2026-05-21 | get Cisco Secure Workload Security Book → | tags: cisco secure workload, cve-2026-20223, site admin privileges

119.

Microsoft warns of new Defender zero-days exploited in attacks (bleepingcomputer.com)

2026-05-21 | get Microsoft Defender Security Pack → | tags: microsoft defender, zero-day exploits, cve-2026-41091

120.

Hackers bypass SonicWall VPN MFA due to incomplete patching (bleepingcomputer.com)

2026-05-20 | get SonicWall VPN Security Kit → | tags: sonicwall, cve-2024-12802, gen6