Akamai security researcher Yuval Gordon has uncovered an Active Directory privilege escalation vulnerability in Windows Server 2025,...
News
In a revelation for web security, researchers from Tsinghua University have exposed two novel, off-path attacks —...
Researchers from KU Leuven’s DistriNet group have unveiled a new high-severity design flaw in mesh Wi-Fi networks....
The open-source graphics editor GIMP—a trusted tool in the digital art and photography community—has been found vulnerable...
A stealthy new macOS infostealer named AppleProcessHub has attracted a lot of attention from security experts, with...
Siemens has issued a security advisory to address an out-of-bounds read vulnerability in its SiPass integrated access...
A deceptively crafted fake Google Meet page has surfaced on compromised WordPress sites, tricking unsuspecting visitors into...
CYFIRMA researchers have uncovered a highly advanced Android remote access trojan (RAT), dubbed GhostSpy, capable of full-spectrum...
According to an official announcement from OpenAI, the Deep Research feature in ChatGPT now supports integration with...
In the Windows 11 version 22H2 released by Microsoft in September 2022, a new feature called Smart...
A critical security flaw in Apache NuttX RTOS has been uncovered in the Bluetooth HCI and UART...
Canon has updated its January 2025 security advisory to include a newly identified critical vulnerability — CVE-2025-2146...
A newly disclosed vulnerability in vBulletin, one of the most widely used commercial forum platforms on the...
A recently disclosed vulnerability in WSO2 products, identified as CVE-2024-6914, poses a severe security threat to organizations...
A newly disclosed critical vulnerability in Sony’s SNC-series network cameras—tracked as CVE-2025-5124 with a CVSS score of...
AhnLab and South Korea’s National Cyber Security Center (NCSC) have released a detailed joint report on a...
Elastic Security Labs has identified a new malware family dubbed “DOUBLELOADER” that leverages ALCATRAZ—a game-hacking inspired obfuscator—to...
Socket’s Threat Research Team has uncovered an active and expanding malware campaign in the npm ecosystem. More...
Recorded Future’s Insikt Group has uncovered a new cyber-espionage campaign by Russia-aligned threat actor TAG-110 targeting public...
A newly disclosed flaw in GNOME’s remote desktop component, tracked as CVE-2025-5024 (CVSS 7.4), could allow unauthenticated...