Attackers are exploiting a critical flaw in the Issabel Framework, allowing unauthenticated remote users to execute operating system commands via a hard-coded JWT key.
Google has issued security updates for Pixel devices to address a high-severity zero-day vulnerability in the cellular modem component that was being actively exploited.
Google and Mozilla have issued urgent security updates for Chrome and Firefox, addressing 115 vulnerabilities ranging from critical-severity bugs to high-severity defects.
Two zero-day vulnerabilities in TP-Link Tapo C200 cameras could allow attackers to bypass authentication and access live video feeds. A third critical flaw is also being investigated.
Cisco is urging customers to patch a critical zero-day vulnerability in its Secure Email Gateway after discovering active exploitation in the wild.