Tag: rce

Critical Zero-Days Hit Chrome, Linux AppArmor Flaws Enable Root Escalation, Veeam RCE Vulnerabilities Patched

Google patched two actively exploited Chrome zero-days affecting Skia and V8, while researchers disclosed nine privilege escalation vulnerabilities in Linux AppArmor. Veeam released fixes for seven critical RCE flaws in Backup & Replication software.

Mar 13, 2026The Hacker News, Microsoft Security, SANS ISC, MSRC Security Updates

chromezero-daylinux-kernel

🇺🇸Google

highMalware & Threats

Threat Roundup: AI-Generated Malware, Corporate Breaches, and Android Lock Screen Bypass

This week saw significant corporate data breaches at Starbucks and Telus Digital, alongside the emergence of AI-generated Slopoly malware used in ransomware attacks. Critical vulnerabilities in Veeam backup software and an Android lock screen bypass vulnerability highlight ongoing infrastructure security challenges.

Mar 13, 2026BleepingComputer, Graham Cluley, Cisco Talos, Checkpoint Research, Malwarebytes Labs

data-breachransomwaremalware

🇺🇸Google

highVulnerabilities & Exploits

Weekly Security Roundup: Critical OCaml RCE, FreePBX Mass Compromise, and 900+ Systems Still Infected

Security teams face multiple active threats this week including a critical remote code execution vulnerability in OCaml affecting Marshal deserialization, over 900 Sangoma FreePBX instances remaining compromised with web shells since December, and nearly 3,000 exposed Google Cloud API keys providing unauthorized Gemini access.

Feb 28, 2026The Hacker News, SANS ISC, MSRC Security Updates

vulnerability-rounduprceweb-shells

🇺🇸Google

criticalNation-State & APT

Critical Cisco SD-WAN Exploitation, Claude AI Vulnerabilities, and Million-Scale Data Breaches

CISA issued an emergency directive about ongoing Cisco SD-WAN exploitation by threat actors targeting federal networks. Meanwhile, Check Point discovered RCE vulnerabilities in Anthropic's Claude AI coding assistant, and TriZetto revealed a data breach affecting over 3 million Americans.

Feb 26, 2026Security Affairs, The Record

ciscosd-wanclaude-ai

criticalVulnerabilities & Exploits

Critical Zero-Day Roundup: Dell RecoverPoint Exploited Since 2024, VoIP Phones Under Attack

Critical zero-day in Dell RecoverPoint exploited since 2024, VoIP phones exposed to RCE, VS Code extensions vulnerable, and AI assistants weaponized as C2 proxies.

Feb 18, 2026The Hacker News, SANS ISC, CISA KEV

zero-dayrcevoip-security

🇺🇸Google