Do Son
Redis, the world’s leading in-memory data platform, has issued an urgent patch addressing a high-severity vulnerability (CVE-2025-62507,...
Vulnerability Report
A newly disclosed Windows vulnerability, CVE-2025-58726, allows attackers with low privileges to gain SYSTEM-level access remotely by...
In mid-October 2025, engineers discovered an architectural flaw in the AMD Zen 5 series processors related to...
Researchers at Arctic Wolf Labs have uncovered an extensive cyber espionage campaign by UNC6384, a Chinese-affiliated threat...
The AhnLab Security Intelligence Center (ASEC) has confirmed that the Kinsing threat actor — also known as...
Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
Elastic Patches High-Severity Privilege Escalation Flaw in Elastic Cloud Enterprise (CVE-2025-37736)
Elastic has issued a security advisory addressing a high-severity vulnerability (CVE-2025-37736, CVSS 8.8) in Elastic Cloud Enterprise...
An extremely severe security vulnerability has been discovered and is being actively exploited in the Jobmonster –...
A critical security vulnerability has been identified and is being actively exploited in the King Addons for...
The Post SMTP plugin, used by over 400,000 WordPress sites to ensure reliable email delivery, has been...
A sophisticated campaign executed by the Chinese state-sponsored threat group BRONZE BUTLER (also known as Tick) has...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two new flaws—CVE-2025-24893 in XWiki Platform and...
Google’s Chromium, developed by Google, forms the foundation of many modern browsers — yet researchers have uncovered...
The DNN Platform, a leading open-source Content Management System (CMS) in the Microsoft ecosystem, is urging its...
Progress Software Corporation has issued a security advisory warning of a high-severity vulnerability in its MOVEit Transfer...
The Jenkins project has issued a major security advisory addressing a wave of vulnerabilities, including high-severity flaws...
The Internet Systems Consortium (ISC) has issued a security advisory warning users of a denial-of-service (DoS) vulnerability...
The Wordfence Threat Intelligence team has issued an urgent warning about CVE-2025-11533, a critical privilege escalation vulnerability...
The Google Chrome team has urgently promoted Chrome version 142 to the stable channel for Windows, Mac,...
Security researcher Crnkovic has disclosed three critical vulnerabilities — CVE-2025-9152, CVE-2025-10611, and CVE-2025-9804 — in WSO2 API...
In a study titled “TEE.fail: Breaking Trusted Execution Environments via DDR5 Memory Bus Interposition,” researchers from Georgia...