The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed in the wild.

The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.

The security vendor said it initially discovered a portion of the defect during internal security checks in June, but the company said it didn’t meet the threshold…

The vendor was much quicker and consistent in its response to the latest defect, and researchers consider the impact relatively low compared to the previous pair of…

Mandiant researchers said dozens of organizations have been impacted by attacks attributed to advanced and suspected state-sponsored threat groups. They expect more attacks to come.

The vendor’s products are a common, recurring target for attackers, yet the official warning for some Citrix NetScaler customers was too late.

One flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to upgrade immediately.

SonicWall customers have confronted a barrage of attacks for years, including five actively exploited vulnerabilities in SMA 1000 appliances since late 2025.

Researchers said the vulnerabilities, which attackers are chaining together, were first exploited three weeks before the vendor disclosed and patched the defects.

The escalated threat posed by the defect showcases how quickly a seemingly mild vulnerability can turn into an urgent warning.