vulnerability

3 min read

• China
• cybercrime
• Cybersecurity
• Google
• Google Threat Intelligence Group
• hacking
• n-day
• nation state threats
• nation-state hackers
• Research
• Russia
• Threats
• vulnerability
• WinRAR

Cybercriminals and nation-state groups are exploiting a six-month old WinRAR defect

Cyber Scoop January 27, 2026

Cybercriminals and nation-state groups are exploiting a six-month old...

Read More

3 min read

• Action1
• Microsoft
• Patch Tuesday
• Research
• security patch
• Tenable
• Threats
• Trend Micro
• vulnerability
• vulnerability disclosure
• Zero Day Initiative

Microsoft Patch Tuesday addresses 112 defects, including one actively exploited zero-day

Cyber Scoop January 13, 2026

Microsoft Patch Tuesday addresses 112 defects, including one actively...

Read More

3 min read

• AI
• Cybersecurity
• prompt injection
• Research
• servicenow
• Threats
• vulnerability

ServiceNow patches critical AI platform flaw that could allow user impersonation

Cyber Scoop January 13, 2026

ServiceNow patches critical AI platform flaw that could allow...

Read More

3 min read

• Cybersecurity
• greynoise
• HackerOne
• Meta
• Next.js
• open source software
• React2Shell
• Response
• Technology
• Threats
• Unit 42
• Vercel
• VulnCheck
• vulnerability
• vulnerability reporting

Inside Vercel’s sleep-deprived race to contain React2Shell

Cyber Scoop January 8, 2026

Inside Vercel’s sleep-deprived race to contain React2Shell | CyberScoop...

Read More

3 min read

• AI
• Cybersecurity
• n8n
• Research
• Threats
• vulnerability
• vulnerability disclosure
• vulnerability reporting

Researchers rush to warn defenders of max-severity defect in n8n

Cyber Scoop January 7, 2026

Researchers rush to warn defenders of max-severity defect in...

Read More

2 min read

• Cybersecurity
• remote code execution
• Veeam
• vulnerability

Veeam issues patch to close critical remote code execution flaw

Cyber Scoop January 7, 2026

Veeam issues patch to close critical remote code execution...

Read More

3 min read

• Censys
• CISA
• Cybersecurity
• Cybersecurity and Infrastructure Security Agency (CISA)
• MongoBleed
• MongoDB
• Research
• Shadowserver
• Threats
• VulnCheck
• vulnerability
• Wiz

MongoBleed defect swirls, stamping out hope of year-end respite

Cyber Scoop December 29, 2025

MongoBleed defect swirls, stamping out hope of year-end respite...

Read More

3 min read

• Amazon Threat Intelligence
• Amazon Web Services (AWS)
• APT44
• critical infrastructure
• Cybersecurity
• energy
• exploit
• Geopolitics
• GRU
• managed service providers
• network edge devices
• Research
• routers
• Russia
• Sandworm
• source code
• Telecommunications
• Threats
• virtual private network (VPN)
• vulnerability
• WatchGuard

Amazon warns that Russia’s Sandworm has shifted its tactics

Cyber Scoop December 16, 2025

Amazon warns that Russia’s Sandworm has shifted its tactics...

Read More

3 min read

• California
• Clop
• Cox Enterprises
• cybercrime
• Cybersecurity
• Dartmouth College
• data breaches
• Harvard
• Harvard University
• Logitech
• MOVEit Transfer
• Oracle
• ransomware
• Threats
• University of Pennsylvania
• vulnerabilities
• vulnerability
• vulnerability disclosure
• Zero-day
• zero-day exploit

University of Pennsylvania joins growing pool of Oracle customers impacted by Clop attacks

Cyber Scoop December 2, 2025

University of Pennsylvania joins growing pool of Oracle customers...

Read More

2 min read

• Android
• Cybersecurity
• Cybersecurity and Infrastructure Security Agency (CISA)
• Google
• known exploited vulnerabilities (KEV)
• patch management
• Technology
• vulnerabilities
• vulnerability
• vulnerability disclosure
• Vulnerability Management
• vulnerability reporting

Google addresses 107 Android vulnerabilities, including two zero-days

Cyber Scoop December 1, 2025

Google addresses 107 Android vulnerabilities, including two zero-days |...

Read More