Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

A Shadowserver scan found over 48,000 Cisco ASA/FTD firewalls remain unpatched against two critical zero-day RCE/Unauthorized Access flaws, despite CISA’s emergency directive.

Security researchers warn that a critical remote code execution (RCE) vulnerability in legacy D-Link DSL routers is being actively exploited in the wild, leaving thousands of unpatchable devices w…

It appears that antiquated D-Link hardware remains operational in various environments, a persistence that adversaries are now endeavoring to transform into a potent attack vector. Network monitor…

Shadowserver warns of active exploitation of CVE-2021-4473 in Tianxin systems. This 9.3 CVSS flaw allows unauthenticated RCE. Patch your firmware immediately!

Weaver E-cology 10.0 faces a critical 9.3 CVSS RCE (CVE-2026-22679). Unauthenticated attackers can hijack servers via a debug endpoint. Patch immediately!

Protect your network from the active Ivanti Sentry critical vulnerability. Discover how hackers exploit CVE-2026-10520 for root access and secure your gateway.

A home router can appear entirely functional – broadcasting Wi-Fi and sitting quietly on a shelf for years – while silently routing someone else’s attack traffic. Researchers hav…

Corporate email can fall into an attacker’s hands after the compromise of a single low-privilege account. Nearly 22,000 internet-facing Microsoft Exchange servers have not received the fix f…

Plex is once again urging owners of home media servers to act before any technical explanation appears. On September 1, the company demanded that users update Plex Media Server to version 1.43.3 o…