WordPress has patched CVE-2026-65640, a high-severity vulnerability that allows authenticated attackers to execute arbitrary code.

Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs.

CISA says attackers are exploiting TeamCity CVE-2026-63077, an unauthenticated RCE flaw that can expose credentials and ...

Contrast Security, the leader in Application Detection and Response (ADR), today announced Contrast CVE Shield to stop the wave of AI-generated exploits made possible by frontier models like Claude ...

CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code execution ...

Microsoft's August Patch Tuesday release is smaller than July's record-breaking update, but only by the standards of what has quickly become a new era of massive monthly security drops.

Forbes contributors publish independent expert analyses and insights. Tech CEO Covering Cybersecurity, AI, Compliance & National Security. In cybersecurity, some moments pass quietly. Others expose ...

Now AI is making fake vulnerabilities and polluting the ecosystem. A batch of critical- and high-rated SQLite CVEs that ...

Forbes contributors publish independent expert analyses and insights. Kate O’Flaherty is a cybersecurity and privacy journalist. U.S. President Donald Trump has cut funding for the global database of ...

Over the weekend, security experts were beginning to panic. MITRE announced that the US government had not renewed funding for the Common Vulnerabilities and Exposures (CVE) database. MITRE VP Yosry ...