A high-severity vulnerability, designated CVE-2024-26582, has been discovered within the Transport Layer Security (TLS) subsystem of the...
Vulnerability
A patched vulnerability within Apple’s Shortcuts automation framework presents a substantial risk to macOS and iOS devices....
The notorious 8220 Gang has resurfaced, targeting cloud infrastructure in a campaign demonstrating significant advancements in their...
Security researchers have recently disclosed three vulnerabilities affecting Apache Answer versions up to 1.2.1. These vulnerabilities could...
Security researchers at Aqua Nautilus have uncovered a sophisticated campaign exploiting misconfigurations and vulnerabilities in Apache Hadoop...
Developers using the Fiber Go web framework should immediately address a critical vulnerability in the CORS middleware....
A critical security vulnerability has been exposed in Progress Kemp LoadMaster, leaving your network infrastructure at grave...
OpenVPN has released version 2.6.9 for Windows, Mac, and Linux, addressing a severe privilege escalation vulnerability (CVE-2023-7235)....
In September 2023, the infamous Russian-linked cyber-espionage group APT29 flexed its muscle again, this time targeting embassies...
In alarming news from February 2024, ConnectWise, a prevalent provider of remote desktop software, disclosed severe security...
The Spring Framework, a cornerstone of countless enterprise Java applications, recently revealed a significant vulnerability (CVE-2024-22243). This...
Atlassian has released a security update addressing CVE-2024-21678 (CVSS 8.5), a high-severity stored cross-site scripting (XSS) vulnerability...
A serious vulnerability jeopardizes the security of WordPress websites using the popular RSS Aggregator by the Feedzy...
A recent discovery by Sonar’s Vulnerability Research Team has exposed a major security issue within the popular...
VMware has released an urgent security advisory regarding two critical vulnerabilities within its now-deprecated Enhanced Authentication Plug-in...
In a chilling development, ConnectWise issued a critical security advisory on February 19, 2024, exposing two gaping...
A recently disclosed vulnerability in Spring Security (CVE-2024-22234, CVSS 7.4) could lead to unauthorized access within affected...
Recent disclosures have highlighted multiple security vulnerabilities within the Apache DolphinScheduler workflow scheduling platform. These vulnerabilities demand...
Zyxel’s recent security advisory spotlights multiple vulnerabilities present in select firewall and access point models. Failure to...
PostgreSQL databases are a popular choice for developers, but a recently discovered vulnerability (CVE-2024-1597, CVSS 10) highlights...