cve-2026-45585
65 articles with this tag
✨
AI summary
Loading…
CRITICAL
MEDIUM
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
VU#226679: Microsoft WinRE allows for bypass of UEFI/BIOS password enforcement
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
Angry bug hunter with Microsoft beef drops new Windows 0-day
Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flaws
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days
Patch Tuesday - June 2026
Microsoft’s June 2026 Patch Tuesday Addresses 198 CVEs ( CVE-2026-49160, CVE-2026-50507)
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
How Leading Organizations Are Turning EDR Into Operational Resilience
Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
Critical Windows Netlogon RCE flaw now exploited in attacks
OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts
Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
Microsoft and security researcher’s dueling posts about cybersecurity disclosures get nasty
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks
What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels
Disgruntled 0-day hunter 'humiliated' by Microsoft pledges 'bone shattering drop' as Redmond calls cops
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
Microsoft Condemns "Uncoordinated" Zero Day Disclosures
JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware
Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
3 SOC Steps that Shut Down Incident Risks Early
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
Gitea Vulnerability Exposes Private Container Images without Authentication
AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
Bulletin d'actualité CERTFR-2026-ACT-023 (26 mai 2026)
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
MFA Prompt Bombing: Why Your Second Factor Isn't Saving You
CERT-In Mandates 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks
Iranian Hackers Deploy MiniFast and MiniJunk V2 via Phishing and SEO Poisoning
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks
The Alert Firehose Finally Meets Its Match
Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
Automated vulnerability intel, using Hermes AI
Microsoft is working on a patch for ‘YellowKey’ attack on Bitlocker, offers temporary fix
YellowKey: The Unpatched BitLocker Bypass Hidden in Windows Recovery
Grafana breach caused by missed token rotation after TanStack attack
Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass
CVE-2026-45585: Windows BitLocker — YellowKey Recovery Bypass Analysis
Multiples vulnérabilités dans Microsoft Windows (20 mai 2026)
Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit
Microsoft provides mitigation for “YellowKey” BitLocker bypass flaw (CVE-2026-45585)
Microsoft shares mitigation for YellowKey Windows zero-day
NCSC-2026-0165 [1.00] [M/H] Kwetsbaarheid aangetroffen in Microsoft Windows
CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability