Dirty Frag CVE-2026-43284: New Linux Kernel Exploit Gives Root Access on Every Major Distribution
Dirty Frag (CVE-2026-43284) is a new Linux kernel exploit granting root on Ubuntu, RHEL, Fedora, and all major distros. Two…
🛡️
Cybersecurity
CVEs, exploits, pentesting & threat intel
73 posts
// cybersecurity
updated daily
🛡️ Featured
CISA CI Fortify 2026: US Tells Critical Infrastructure to Prepare for Weeks-Long Cyber Blackouts
Palo Alto PAN-OS Zero-Day CVE-2026-0300: Root RCE on Firewalls Under Active Exploitation
CVE-2026-0300 is a CVSS 9.3 zero-day in Palo Alto PAN-OS giving unauthenticated root RCE on firewalls. Actively exploited since April…
Canvas Data Breach 2026: ShinyHunters Steal 275 Million Student Records
ShinyHunters hacked Canvas LMS in the largest education breach ever — 275 million student records stolen from 8,809 universities. Ransom…
🛡️
Kali Linux 2026.2 Released — New Penetration Testing Tools and Improved ARM Support
Kali Linux 2026.2 is out with new offensive security tools, improved Raspberry Pi and Apple Silicon ARM support, kernel 7.0…
🛡️
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 — 31 Critical Vulnerabilities
The Interlock ransomware group exploited a Cisco Firewall Management Center zero-day as an initial access vector. Here's how the attack…
🛡️
NIST Changes CVE Enrichment Policy Amid 263% Surge in Vulnerability Submissions
NIST's NVD will now selectively enrich CVEs after a 263% surge in submissions overwhelmed the team. Here's how security teams…
🛡️
Microsoft Zero Day Quest 2026 — $2.3 Million Awarded for Vulnerability Research
Microsoft's Zero Day Quest 2026 concluded with $2.3 million in payouts — the largest in program history — for critical…
🛡️
Apache ActiveMQ Critical RCE Flaw CVE-2026-34197 Under Active Exploitation — Patch Now
A high-severity RCE vulnerability in Apache ActiveMQ Classic (CVE-2026-34197, CVSS 8.8) is under active exploitation. Thousands of exposed brokers are…
🛡️
Apple Discloses First Actively Exploited Zero-Day of 2026 — CVE-2026-20700
Apple disclosed its first actively exploited zero-day of 2026, CVE-2026-20700, affecting iOS, iPadOS, and macOS. Update to iOS 19.3.2 and…