Check Point Harmony Flaw Allows Local Users to Gain SYSTEM Privileges on Windows CyberSecurity News CyberDefenderJanuary 28, 2026January 28, 20265 mins0 A serious local privilege escalation vulnerability was discovered in the Check Point Harmony SASE agent for Windows,…continue reading..
Critical WinRAR Flaw Actively Exploited by State-Backed and Criminal Hackers Worldwide CyberSecurity News CyberDefenderJanuary 28, 2026January 28, 20267 mins0 A widely used Windows archiving tool, WinRAR, has become the focal point of active exploitation by a…continue reading..
Fortinet Confirms Active Exploitation of FortiCloud SSO Zero-Day, Releases Mitigations as Patch Is Prepared CyberSecurity News CyberDefenderJanuary 28, 2026January 28, 202610 mins0 Fortinet has confirmed that a critical FortiCloud Single Sign-On (SSO) authentication bypass vulnerability, tracked as CVE-2026-24858, is…continue reading..
CVE-2026-22696: Critical dcap-qvl Flaw Lets Attackers Forge SGX/TDX Attestations and Bypass Trust Vulnerabilities AegironJanuary 27, 2026January 27, 202610 mins0 CVE-2026-22696 – dcap-qvl Missing Cryptographic Enforcement CVE: CVE-2026-22696Name: dcap-qvl missing verification for QE IdentityCVSS Score: 9.3 (Critical)Severity:…continue reading..
CVE-2026-22709: Critical vm2 Sandbox Flaw Lets Untrusted JavaScript Break Free and Execute Code on Host Systems Vulnerabilities AegironJanuary 27, 2026January 27, 202610 mins0 CVE-2026-22709 – vm2 Node.js Sandbox Escape Vulnerability Overview CVE ID: CVE-2026-22709Affected Component: vm2 (Node.js JavaScript sandbox)Vulnerability Type:…continue reading..
CVE-2025-66719: Critical free5GC NRF Flaw Enables Unauthorized 5G Core Access Vulnerabilities AegironJanuary 27, 2026January 27, 202611 mins0 Improper OAuth2 scope validation allows attackers to obtain high-privilege access tokens without authorization Vulnerability Overview CVE ID:…continue reading..
CVE-2026-24540: WordPress Google Drive Plugin Flaw Exposes Sites to Full Admin Takeover Vulnerabilities AegironJanuary 27, 2026January 27, 20268 mins0 Vulnerability Overview (At a Glance) Official Patch / Upgrade Link Detailed Vulnerability Description A missing authorization flaw…continue reading..
CVE-2025-13952: Critical GPU Shader Compiler Flaw Enables Remote Privilege-Level Code Execution Vulnerabilities AegironJanuary 27, 2026January 27, 202611 mins0 CVE-2025-13952 — GPU Shader Compiler Vulnerability CVE: CVE-2025-13952Name: GPU Shader Compiler Use-After-Free → WriteCVSSv3 Score: 9.8 (Critical)Severity:…continue reading..
CVE-2026-24307: Critical Microsoft 365 Copilot Flaw Exposes Cross-Tenant Data, Puts Enterprise Information at Risk Vulnerabilities AegironJanuary 27, 2026January 27, 202611 mins0 CVE-2026-24307 — Microsoft 365 Copilot Information Disclosure Vulnerability CVE ID: CVE-2026-24307Severity: CriticalCVSS v3.1 Score: 9.3 (Critical)Exploitability: Remote…continue reading..
CVE-2026-24305: Critical Azure Entra ID Authorization Flaw Opens Door to Silent Privilege Escalation and Tenant-Wide Identity Takeover Vulnerabilities AegironJanuary 27, 2026January 27, 202610 mins0 CVE Details (At a Glance) Description CVE-2026-24305 is a critical authorization vulnerability in Azure Entra ID where…continue reading..
