Netcrook
#RCE flaw
Three Office Flaws, One Familiar Inbox: Why Outlook Preview Can Become a High-Risk Entry Point
Microsoft’s June Office security updates put Outlook and Word back in the spotlight, with a cluster of code-execution bugs that may turn routine email rendering into an attacker-controlled moment.
Windows Netlogon Turns Into a High-Value Entry Point as Exploitation Picks Up
A recently patched critical Netlogon remote code execution flaw is being used in attacks, putting domain controller trust paths back under pressure.
NGINX Alarm Bells Ring, But the New “poolslip” Flaw Still Needs Proof
A claimed remote code execution bug in NGINX 1.31.0 has raised attention, yet the public technical trail still lacks the kind of evidence defenders need before panic becomes policy.
When a Link Becomes a Launch Command: Claude Code and the Peril of Trusted Handlers
A reported deeplink flaw in Anthropic’s coding assistant shows how URI handling, configuration overrides, and shell hooks can collide into local code execution risk.
Patch the Trust Layer: Fortinet Bugs Put Security Appliances on the Hot Seat
Two critical remote-code-execution flaws affecting FortiSandbox and FortiAuthenticator turn a defensive stack into a potential attack surface, with the biggest risk concentrated in unpatched systems.
When a Local AI Tool Becomes a Web Attack Surface
A missing Origin check in Cline Kanban’s local WebSocket channel shows how a browser tab can become a bridge into a developer workstation.
Shadow Code: VMware Aria Operations Faces Real-World Attacks After RCE Flaw Exposed
A critical command injection vulnerability in VMware Aria Operations is now confirmed as exploited, raising urgent alarms for enterprise IT teams.