Cyber alerts

3,008 results

April 2026

Published Thursday 9 April 2026 (01:20) (updated 9 April 2026)

Mitel Releases Security Advisory for MiCollab

A critical SQL injection vulnerability could allow a remote unauthenticated attacker to access system information and execute arbitrary SQL database commands

CC-4767 Medium

Published Tuesday 7 April 2026 (04:03) (updated 7 April 2026)

Progress Releases Security Updates for ShareFile Storage Zones Controller (SZC)

Successful exploitation could allow an unauthenticated remote attacker to access on-prem storage zones controller’s configuration pages, potentially leading to changes in system configuration and remote code execution

CC-4766 High

Published Tuesday 7 April 2026 (11:20) (updated 7 April 2026)

Exploitation of Zero-Day Vulnerability in FortiClient EMS

CVE-2026-35616 could allow an unauthenticated attacker to perform remote code execution (RCE)

CC-4765 Medium

Published Thursday 2 April 2026 (03:09) (updated 2 April 2026)

Google Releases Security Update for Chrome

Updates include 21 security fixes, including one that addresses an exploited high severity vulnerability (CVE-2026-5281)

March 2026

CC-4764 Medium

Published Tuesday 31 March 2026 (02:04) (updated 31 March 2026)

Axios HTTP Client Package Compromise

Affected packages contain a malicious dependency designed to deploy remote access trojan malware

CC-4763 High

Published Monday 30 March 2026 (10:24) (updated 30 March 2026)

Critical RCE Vulnerability in F5 BIG-IP Under Exploitation

CVE-2025-53521 could allow an unauthenticated attacker to execute code remotely

CC-4762 Medium

Published Friday 27 March 2026 (11:32) (updated 27 March 2026)

Telnyx PyPI Package Compromise

Affected packages contain a variant of the ContainerWorm malware, which can exfiltrate secrets and establish persistence

CC-4761 Medium

Published Wednesday 25 March 2026 (01:25) (updated 25 March 2026)

LiteLLM PyPI Package Compromise

Affected packages contain malicious code that can exfiltrate secrets and establish persistence

CC-4760 Medium

Published Monday 23 March 2026 (12:32) (updated 23 March 2026)

Oracle Releases Out-of-Band Security Update for Oracle Identity Manager and Oracle Web Services Manager

A critical vulnerability could allow an unauthenticated attacker to takeover Oracle Identity Manager and Oracle Web Services Manager

CC-4759 High

Published Monday 23 March 2026 (12:22) (updated 30 March 2026)

Citrix Releases Critical Security Updates for NetScaler ADC and NetScaler Gateway

Advisory addresses two vulnerabilities which if exploited could lead to User Session Mixup or memory overread