Patch/Configuration Management

The vulnerability stems from an unauthenticated "/api/backup" endpoint that allows attackers to request a full system backup.

The exploit kit affects versions of iOS between 13.0 and 17.2.1.

The User Registration & Membership plugin, developed by WPEverest, enables membership and user registration features.

Researchers say an attacker could achieve unauthenticated RCE by sending a crafted email.

Internet-facing edge devices are now major targets for attackers as the war in the Middle East unfolds.

The new bi-weekly release cadence will apply to both beta and stable versions of Chrome on Desktop, Android, and iOS.

Broadcom patched the flaw on Feb. 24, but CISA added VMware vulnerability after exploitation.

The critical vulnerability, identified as CVE-2026-21385, is an integer overflow in a Qualcomm graphics subcomponent that could allow local attackers to cause memory corruption.