News & Sicurezza

Apple 0-Day Vulnerability Actively Exploited in Sophisticated Attack to Target Individuals Apple 0-Day Vulnerability Exploited Apple released iOS 26.3 and iPadOS 26.3 on February 11, 2026, patching over 40 vulnerabilities, including a critical zero-day in the dyld component actively exploit ... Read more Published Date: Feb 12, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-20642 CVE-2026-20640 CVE-2026-20617 CVE-2025-43529 CVE-2025-14174

Apple Patch Tuesday – February 2026 February 12, 2026Critical Security Updates Across iOS, macOS, and Apple EcosystemApple released a coordinated set of security updates on February 11, 2026, aligning with the global Patch Tuesday cycle ... Read more Published Date: Feb 12, 2026 (1 day, 4 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-20681 CVE-2026-20676 CVE-2026-20674 CVE-2026-20654 CVE-2026-20652 CVE-2026-20650 CVE-2026-20649 CVE-2026-20645 CVE-2026-20644 CVE-2026-20636 CVE-2026-20635 CVE-2026-20630 CVE-2026-20627 CVE-2026-20626 CVE-2026-20617 CVE-2026-20615 CVE-2026-20611 CVE-2026-20609 CVE-2026-20608 CVE-2026-21643

Chrome 145 Patches 3 High-Severity Flaws in CSS & Codecs Google has officially promoted Chrome 145 to the stable channel, rolling out a fresh wave of defenses for billions of users across Windows, Mac, and Linux. This update isn’t just about new features; i ... Read more Published Date: Feb 12, 2026 (1 day ago) Vulnerabilities has been mentioned in this article.

CVE ID : CVE-2026-1537 Published : Feb. 12, 2026, 4:15 a.m. | 8 hours, 10 minutes ago Description : The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the load_step() function in all versions up to, and including, 5.2.6. This makes it possible for unauthenticated attackers to view booking information including customer names, email addresses, phone numbers, appointment times, and service details. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the 'sb_login_user_with_otp_fun' function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators.

CVE ID : CVE-2026-1729 Published : 12. Februar 2026 02:15 | 8 Stunden, 10 Minuten ago Description : The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.0.12. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the 'sb_login_user_with_otp_fun' function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Apple Zero-Day (CVE-2026-20700) Exploited in the Wild Apple has issued an emergency security update for its entire mobile ecosystem, racing to close a critical zero-day vulnerability that is currently being used in what the company describes as an “extre ... Read more Published Date: Feb 12, 2026 (1 day, 1 hour ago) Vulnerabilities has been mentioned in this article. CVE-2026-20700 CVE-2026-26007 CVE-2026-24858 CVE-2026-21509 CVE-2025-43529 CVE-2025-14174 CVE-2025-24085 CVE-2024-44258

Critical SQL Injection in FortiClientEMS: CVE-2026-21643 February 12, 2026CVE-2026-21643 is a critical SQL injection vulnerability affecting Fortinet FortiClientEMS version 7.4.4, enabling unauthenticated attackers to execute arbitrary code via crafted HTTP ... Read more Published Date: Feb 12, 2026 (23 hours, 59 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-21643

CVE-2026-26007: Python Cryptography Flaw (CVSS 8.2) Leaks Private Keys A high-severity vulnerability has been discovered in the cryptography Python package, one of the most widely used libraries for securing modern applications. The flaw, tracked as CVE-2026-26007, carri ... Read more Published Date: Feb 12, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2026-26007 CVE-2026-25993 CVE-2026-24858 CVE-2026-21509 CVE-2026-0622 CVE-2025-66049 CVE-2025-14026 CVE-2024-9043

The Rise of Vibecoding: AI-Generated Malware Exploits React2Shell A new class of cyberattack has been caught in the wild, one where the code isn’t written by a human hand, but generated entirely by artificial intelligence. Darktrace has released a report detailing a ... Read more Published Date: Feb 12, 2026 (1 day ago) Vulnerabilities has been mentioned in this article. CVE-2026-26007 CVE-2026-25993 CVE-2026-24858 CVE-2026-21509 CVE-2025-55182

CVE-2026-25993: Critical EverShop SQL Injection (CVSS 9.3) Exposes Stores A critical vulnerability has been discovered in EverShop, a modern, developer-focused e-commerce platform built on React and GraphQL. The flaw, tracked as CVE-2026-25993, is a “Second-Order SQL Inject ... Read more Published Date: Feb 12, 2026 (20 hours, 38 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-26007 CVE-2026-25993 CVE-2026-24858 CVE-2026-21509

Excel Trap: New Phishing Campaign Deploys Fileless XWorm RAT Overview of the XWorm phishing campaign infection chain | Image: Fortinet A new phishing campaign is exploiting an old vulnerability, using malicious Excel files to deploy the potent XWorm Remote Acce ... Read more Published Date: Feb 12, 2026 (18 hours, 48 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2026-24858 CVE-2026-21509 CVE-2018-0802