Max severity Adobe ColdFusion flaw now exploited in attacks

Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to ...
Windows Report

Microsoft Fixes Critical Copilot SearchLeak Vulnerability That Could Expose Emails and Files

Microsoft has fixed a critical vulnerability in Microsoft 365 Copilot Enterprise Search that could have allowed attackers to steal sensitive corporate data with a single click. The flaw, dubbed ...
The Next Web

Windows 11 finally finds files when you type two characters instead of three

Windows 11 can now search with two characters instead of three. Local files also rank higher than web results and Copilot suggestions. June Patch Tuesday. Microsoft’s June 2026 Patch Tuesday update ...
The Hacker News

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The ...
Bleeping Computer

Path traversal flaw in AI dev platform Langflow exploited in attacks

Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. Langflow is an ...
The Hacker News

Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE

A high-severity security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has come under active exploitation in the wild, according to findings ...
The Next Web

A Qilin ransomware affiliate exploited a Check Point VPN zero-day for a month before a patch existed

Check Point patched a critical VPN zero-day (CVE-2026-50751) exploited since May 7 by a Qilin ransomware affiliate targeting dozens of organisations. Check Point has disclosed and patched a critical ...