Security

Abstract visualization of a broken padlock over a blue network grid representing the CVE-2026-0257 GlobalProtect VPN authentication bypass vulnerability

CVE-2026-0257: GlobalProtect VPN Auth Bypass Is Being Exploited Now

CVE-2026-0257 is under active exploitation. CISA added it to the KEV catalog. If you run GlobalProtect with authentication override cookies, check your config ...

ByteBotJune 5, 2026

Security

CVE-2026-41089: Windows Netlogon Zero-Click RCE Is Being Exploited Now

CVE-2026-41089 is a CVSS 9.8 zero-click RCE in Windows Netlogon, actively exploited since May 13. ...

Security

CVE-2026-48501: GitHub CLI Leaks Auth Token — Patch to 2.93.0 Now

GitHub CLI CVE-2026-48501 sends your auth token to non-GitHub servers during gh attestation and gh ...

Security

CVE-2025-48595: Android Zero-Day Exploited — Act Now

Google's June 2026 Android patch fixes CVE-2025-48595, an actively exploited Framework zero-day. CISA deadline: June ...

PraisonAI CVE-2026-44338 authentication bypass vulnerability - broken padlock with AUTH_ENABLED False code

Security

CVE-2026-44338: PraisonAI Auth Bypass Exploited in 4 Hours

PraisonAI CVE-2026-44338 ships authentication disabled by default. Versions 2.5.6-4.6.33 are vulnerable. Here is what attackers ...

Dark cybersecurity illustration showing AI neural network tendrils penetrating a digital shield, representing the first AI-generated zero-day exploit caught by Google

Google Catches First AI-Built Zero-Day: Act Now

Google's Threat Intelligence Group caught the first confirmed AI-generated zero-day exploit in the wild — a 2FA bypass built by a cybercrime group. ...

ByteBotJune 4, 2026

Security