Tag: activemq

Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. […]

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users. […]

Microsoft schließt im Juni-Patchday rund 206 Schwachstellen, darunter 33 kritische. Ein aktiv ausgenutzter Zero-Day in Defender und drei vor dem Patch öffentlich bekannte Lücken erhöhen den Handlungsdruck. Zusätzlich liefert Microsoft außerplanmäßige Sicherheitsupdates für Exchange Server.

Die US-Behörde CISA nimmt zwei aktiv ausgenutzte Schwachstellen in ihren KEV-Katalog auf. Im Visier stehen die KI-Workflow-Plattform Langflow und der On-Premises-Server von Trend Micro Apex One. Beide Lücken erlauben das Einschleusen von Schadcode, eine davon sogar ohne direkte An­mel­dung des Angreifers.

The Active Sessions and Lockdown Mode features are being made more broadly available by the AI giant. The post OpenAI Rolling Out ChatGPT Account Security Controls appeared first on SecurityWeek.

Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. […]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system. […]

Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. […]