Security researchers have published a public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics vulnerability that Apple confirmed was exploited in targeted attacks against iPhones and Macs. The flaw is triggered by a crafted PDF.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a pre-authentication remote code execution (RCE) vulnerability in MikroTik RouterOS. Tracked as CVE-2026-84411, the flaw allows unauthenticated attackers to gain root
Cisco has issued a critical warning regarding active exploitation of an authentication bypass vulnerability, CVE-2026-76504, in its Catalyst SD-WAN Manager. The flaw allows unauthenticated remote attackers to gain administrative control.
A new Spectre-v2 variant named Branch Target Reuse (BTR) can recover Linux root password hashes from Intel, AMD, and Arm processors in under five minutes.
Researchers have identified a new Spectre v2 attack variant, Branch Target Reuse (BTR), which can recover Linux root password hashes in as little as three to five minutes.
