CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
The U.S.
Vulnerability Disclosure
20 articles
China's 360 Security Technology unveils AI models for vulnerability discovery
During the ISC.AI 2026 conference in Beijing, 360 Security Technology introduced Yitian Tulong, comprising two AI models: Tulongfeng for vulnerability discov...
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 15, 2026 to June 21, 2026)
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPres...
Vulnerability Management is Broken: How to Reduce Risk (Not Just CVEs) in Containers - WC #1
Cisco Vulnerability Exploited Months Before Disclosure, Google Warns
A high-severity flaw in Cisco Catalyst SD-WAN Manager disclosed in early June was exploited as early as March
Experts on Experts: Why AI and Compliance Are Forcing A New Security Operating Model
This week on Experts on Experts, I sat down with Sabeen Malik, Rapid7’s VP of Global Government Affairs and Public Policy, to discuss a shift security leader...
Trust in Automated AI Vulnerability Scanning Collapses to 9%, New Study Finds
Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing
Delta Electronics DTM Soft
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. The following versions of Delta Electronic...
OHIF Viewers DICOM
View CSAF Summary Successful exploitation of this vulnerability in a custom integration version could allow an attacker to steal an authenticated clinician's...
pydicom pynetdicom Library
View CSAF Summary Successful exploitation of this vulnerability could allow an unauthenticated attacker to write to arbitrary file paths. The following versi...
Schneider Electric PowerLogic P7
View CSAF Summary Schneider Electric is aware of a vulnerability in its PowerLogic™ P7 product. The PowerLogic™ P7 is a protection and control platform desig...
Yokogawa FAST/TOOLS and CI Server
View CSAF Summary Successful exploitation of this vulnerability may return a response containing the CI Server setting information. The following versions of...
Horner Automation Cscape
View CSAF Summary Successful exploitation of this vulnerability could allow a local attacker to disclose information and execute arbitrary code. The followin...
OHIF Viewers DICOM
View CSAF Summary Successful exploitation of this vulnerability in a custom integration version could allow an attacker to steal an authenticated clinician's...
pydicom pynetdicom Library
View CSAF Summary Successful exploitation of this vulnerability could allow an unauthenticated attacker to write to arbitrary file paths. The following versi...
Did AI kill vulnerability management—or just expose its flaws?
The industry just has to face that vulnerability management has been broken for years.
Seemplicity AI Analysts focus remediation on exploitable risks
Seemplicity has launched AI Analysts for exposure management and response. The autonomous agents replace manual vulnerability triage by working directly with...
25-Year-Old Vulnerability Patched in Curl
The latest version of the open source data transfer tool resolves 18 medium and low-severity vulnerabilities. The post 25-Year-Old Vulnerability Patched in C...
Chrome 149 Update Resolves 18 Severe Vulnerabilities
More than half of the bugs are use-after-free defects, which can potentially lead to remote code execution. The post Chrome 149 Update Resolves 18 Severe Vul...
Closing the 'risk window': Why real-time remediation is the new security standard
Organizations must automate remediation workflows to close security gaps before attackers exploit them.