5 stories tagged with this topic.
Microsoft has acknowledged CVE-2026-50656, a privilege-escalation flaw in Microsoft Defender dubbed RoguePlanet, and is developing a patch after a researcher released a proof-of-concept exploit. The vulnerability affects Windows 10 and 11 systems regardless of real-time protection status.
Three critical Fortinet sandbox vulnerabilities, patched in April and June, are now under active exploitation, with attackers bypassing authentication and executing arbitrary code. Threat intelligence firm Defused reports exploitation began over the weekend, despite no public exploit for one flaw.
Cisco has released security updates for a zero-day vulnerability in Catalyst SD-WAN Manager (formerly vManage) that was actively exploited to gain root access. The flaw, tracked as CVE-2026-20262, affects all deployment types and stems from insufficient input validation during file uploads.
Microsoft's June 2026 Patch Tuesday is the largest in the cycle's history, covering close to 200 vulnerabilities in Windows and related software, with Rapid7 noting an additional 360 browser flaws that fall outside the official count.
Mandiant and Google Threat Intelligence Group have attributed an active compromise campaign to ShinyHunters (UNC6240), exploiting CVE-2026-35273 in Oracle PeopleSoft before Oracle issued its advisory on June 10, 2026. Over 100 organizations were exposed, 68% of them academic institutions.