THE FEED
Keep up with security.
Research, disclosures and exploited vulnerabilities. Links to the source.
A MIX OF RECENT STORIESPAST 7 DAYS
CVE-2026-85102: Check Point Multiple Products Improper Certificate Validation Vulnerability
Check Point Security Gateway and Check Point Spark Firewall using Site to Site VPN or Remote Access VPN contain an improper certificate validation vulnerability which could allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.
Windows Exploitation Techniques: Dangling COM Object Registrations
A unified view of Android security updates for enterprises and OEMs
Data Broker Radaris Loses Domains in Privacy Fight
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
CVE-2026-93616: Check Point Multiple Products Path Traversal Vulnerability
Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.
Hacking group ShinyHunters claims it breached the FBI, stole agents' data
CVE-2026-94127: F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access policy and an OAuth profile are configured on a virtual server. This vulnerability could allow an unauthenticated attacker to perform remote code execution.