Do Son
The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with its federal partners, has issued a high-priority...
Vulnerability Report
A newly disclosed vulnerability in the now-discontinued Amazon Cloud Cam has raised serious concerns about the risks...
A significant surge in brute-force attacks is targeting Apache Tomcat Manager interfaces, according to a new report...
A recently disclosed vulnerability in the PostgreSQL JDBC Driver (PgJDBC) could allow attackers to intercept database connections...
HashiCorp has disclosed a high-severity vulnerability in its workload orchestration tool, Nomad, which could allow attackers to...
On April 29, 2025, Apple issued alerts: select iOS users were being targeted with advanced spyware. Among...
The Spring project has released a security advisory disclosing a vulnerability in the popular Spring Framework, which...
The Mozilla Foundation has issued an urgent security update for the Firefox web browser, addressing two critical...
GitLab has issued urgent security updates for its Community Edition (CE) and Enterprise Edition (EE), addressing a...
A recent coordinated security advisory issued by CERT@VDE and Weidmueller has disclosed three critical vulnerabilities affecting the...
Researcher Zack Didcott has disclosed a critical vulnerability affecting IGEL OS 10. Tracked as CVE-2025-47827, the flaw...
Siemens has issued a critical security advisory regarding its Energy Services platform—formerly known as Managed Applications and...
The QNX Software Development Platform (SDP)—a foundation of many embedded and real-time systems—has been found vulnerable to...
A vulnerability in the Trusted Platform Module (TPM) 2.0 reference implementation has been disclosed, potentially allowing attackers...
HPE Aruba Networking has released a security update addressing a high-severity vulnerability in its Private 5G Core...
Elastic has disclosed a high-severity vulnerability (CVE-2024-43706) affecting its Kibana observability platform, specifically in the Synthetic Monitoring...
Ivanti has released critical security updates addressing three high-severity vulnerabilities in Ivanti Workspace Control (IWC)—a widely-used tool...
A newly disclosed vulnerability in Insyde H2O UEFI firmware, tracked as CVE-2025-4275, allows attackers to bypass Secure...
Security research partner AppOmni disclosed five critical vulnerabilities in Salesforce’s powerful OmniStudio platform that could expose encrypted...
In its newly released report, Bitsight reveals that more than 40,000 internet-connected security cameras across the globe...
Google has released a Stable Channel update for Chrome Desktop, rolling out version 137.0.7151.103/.104 for Windows and...
Security researchers at HiddenLayer have disclosed a critical privilege escalation vulnerability in Backend.AI, a widely used container-based...