Do Son A critical vulnerability in Plex Media Server, with a CVSS score of 10.0, has been patched. Users are urged to update immediately to prevent exploitation.
A critical vulnerability in the Directus API (CVE-2025-55746) allows unauthenticated attackers to silently upload and modify files, leading to webshells and RCE.
A new report reveals a stealthy attack on GeoServer using a critical RCE flaw. Instead of ransomware, attackers are hijacking servers to earn passive income.
A new report from HarfangLab details two recent UAC-0057 (Ghostwriter) campaigns targeting Ukraine and Poland with malicious archives and multi-stage implants.
A critical flaw in the widely used sha.js library (CVE-2025-9288) can lead to hash collisions and private key extraction, threatening web applications.
UNC5518 is using "ClickFix," a new technique that weaponizes fake CAPTCHAs to trick users into launching malware and providing access to other criminal groups.
The latest analysis from NETSCOUT highlights a dramatic escalation in botnet-driven distributed denial-of-service (DDoS) attacks during July...
A new report reveals a sophisticated spear-phishing campaign targeting finance executives. The attack uses social engineering and legitimate tools to evade detection.
A 22-year-old Oregon man has been charged with operating the RapperBot botnet, a network of 10,000s of devices that launched over 370,000 attacks.
A new report shows that AI bots, especially real-time inference queries from tools like ChatGPT, are causing server-overloading traffic that mimics DDoS attacks.
AMD accidentally uploaded the FSR 4 source code to GitHub before pulling it, sparking speculation about unofficial support for older graphics cards.
ouTube is now letting free users download videos. But what's the catch? We break down the new limits on resolution and content for free downloads.
A design flaw in xAI's Grok chatbot has led to over 370,000 private conversations being indexed by search engines and exposed to the public.
Microsoft and Phison are investigating reports that recent Windows 11 updates are causing some SSDs to lock up, disappear, and even corrupt data.
Google's new Gemini for Home is set to replace Google Assistant, bringing multimodal AI and a new subscription model to smart displays and speakers.
A new report from Trend Micro details how the Warlock ransomware group is exploiting a vulnerability in unpatched Microsoft SharePoint servers to attack organizations.
A new report reveals how criminals are using the AI website builder Lovable to create tens of thousands of convincing phishing, malware, and fraud websites.
A new report from Cisco Talos exposes Static Tundra, a Russian state-sponsored group that has exploited unpatched Cisco devices for over a decade.
IBM X-Force has exposed QuirkyLoader, a new malware loader that uses DLL side-loading and .NET AOT compilation to deliver Agent Tesla and other threats.
A new report uncovers the "Traffer" economy, a sophisticated cybercriminal ecosystem that uses business-like structures and SEO abuse to steal data at scale.
A critical flaw in the AI tool CodeRabbit allowed a researcher to gain RCE and write access to over a million repositories via a malicious pull request.
A Red Canary report reveals attackers are exploiting an Apache ActiveMQ flaw to breach Linux systems, then patching the vulnerability to hide their presence.