Do Son A critical vulnerability (CVE-2025-34028) in Commvault Command Center allows remote code execution. Patch immediately or isolate vulnerable instances.
Resecurity uncovers massive NFC fraud wave using Ghost Tap attacks, with Chinese cybercriminals targeting global payment systems and loyalty programs.
Critical flaw CVE-2024-6235 in NetScaler Console lets attackers create admin accounts by abusing an internal API. Patch to version 14.1-25.53 now.
Volexity uncovers Russian threat actors abusing Microsoft 365 OAuth flows via phishing, impersonation, and device registration to access email accounts.
NVIDIA discloses 3 vulnerabilities in the NeMo Framework enabling remote code execution and data tampering. Update to version 25.02 to secure your AI development.
The Verizon 2025 DBIR reveals a surge in vulnerability exploitation and a doubling of third-party breaches. Learn key findings on ransomware, BYOD risks, and more.
Grafana fixes critical CVE-2025-3260 and two medium bugs, urging users to update immediately to prevent unauthorized access and XSS exploits.
A new phishing campaign delivers FormBook malware via Word docs, exploiting CVE-2017-11882. The fileless attack uses process hollowing to evade detection.
WormLocker ransomware is evolving! Discover how version 2.0 abuses system utilities to take over systems, as revealed by ANY.RUN analysis.
In an era where data breaches and cyber threats are more prevalent than ever, securing your online...
Google scraps plans to end third-party cookies in Chrome, leaving Privacy Sandbox sidelined and user tracking by ad networks largely unchanged.
SSL.com disclosed mis-issuance of digital certificates due to a DCV flaw. The "Email to DNS TXT Contact" method was incorrectly implemented.
Windows 11 can now run on iPads in the EU using the UTM virtual machine, thanks to the Digital Markets Act. JIT support improves performance.
Google pays Samsung to preinstall Gemini, raising antitrust concerns in the DOJ lawsuit. Payments for default placements revealed in court.
Telegram rejects France's request for a backdoor to access private messages, citing security risks. CEO Durov prioritizes privacy over market share.
OpenAI shows interest in acquiring Chrome if Google is forced to divest it due to antitrust concerns. The DOJ is examining Google's search dominance.
Critical RCE vulnerability (CVE-2025-32433) in Erlang/OTP affects Cisco products. Unauthenticated attackers can execute code remotely. Patch now!
IBM's Hardware Management Console (HMC) has two privilege escalation vulnerabilities. Update to the latest fix to secure your Power Systems environment.
TP-Link WR841N routers are vulnerable to a stored XSS attack. Update firmware and change your password to protect your device from potential admin password theft.
Two critical CVEs in Yi IOT smart cameras allow unauthenticated RCE and root access via ports 6789 and 999, exposing users to full device compromise.
A deep dive into a sophisticated multi-stage malware attack using Cloudflare to deliver AsyncRAT. Learn how attackers evade detection and compromise systems.
Zyxel releases patches for USG FLEX H firewalls to address critical vulnerabilities. Learn about the security flaws and how to protect your network.