Do Son GCVE introduces a decentralized system for vulnerability IDs, empowering organizations with autonomy and speed. Complements CVE for smoother vulnerability management.
CISA warns of actively exploited vulnerabilities in Apple and Microsoft products. Urgent patching is required to mitigate risks from these attacks.
A critical vulnerability in Bubble.io allows attackers to bypass restrictions and extract all user data from Elasticsearch. The flaw remains unpatched.
Canonical releases Ubuntu 25.04 Plucky Puffin featuring Linux Kernel 6.14, GNOME 48, and enhanced hardware support. Download now!
A major Zoom outage occurred due to a domain registry error at GoDaddy. Learn about the cause and the risk of self-hosted status pages.
Facing overwhelming AI web scraping, Wikimedia releases a free, optimized dataset on Kaggle to encourage direct downloads and reduce server strain.
Google introduces a new tool for developers to monitor and optimize excessive wake lock usage, aiming to reduce unexplained Android battery drain.
OpenAI launches Flex API, offering cheaper access to AI models with trade-offs. Learn about pricing and how it compares to standard options.
OKX officially enters the US market with compliant crypto services after a regulatory settlement. Explore their Web3 wallet and low-fee trading platform.
PoC for CVE-2025-32433, a critical Erlang/OTP SSH flaw enabling unauthenticated RCE, has surfaced. Patch now to protect telecom and high-availability systems.
A vulnerability (CVE-2024-53141) in the Linux kernel's ipset component allows for privilege escalation and kernel-level code execution.
Hitachi Vantara addresses a critical resource injection vulnerability (CVE-2025-0756) in Pentaho Data Integration & Analytics, enabling RCE.
Kaspersky reports the resurgence of IronHusky APT, deploying an evolved MysterySnail RAT in espionage campaigns.
Siemens patches 66 SQL injection vulnerabilities in TeleControl Server Basic, urging users to upgrade and restrict access.
Unit 42 uncovers a sophisticated phishing campaign using multi-layered tactics to deliver malware like Agent Tesla, evading detection.
HarfangLab analysis details Gamaredon's PteroLNK malware, revealing its stealthy tactics and infrastructure used for espionage.
Prodaft analysis reveals Gorilla, a new Android malware evolving to steal data and potentially conduct espionage.
Sekoia TDR reveals Interlock ransomware's evolving tactics, including ClickFix social engineering, to evade detection and steal data.
Hunt.io reveals a server-side phishing campaign that evades detection to steal employee credentials, bypassing 2FA.
A critical vulnerability (CVE-2025-30911) in the RomethemeKit For Elementor WordPress plugin allows authenticated users to achieve RCE.
CISA warns of potential risks from Oracle cloud credential exposure. Urges password resets, MFA, and vigilance against phishing attacks.
EU & US sanctions hit Garantex, Russia's crypto exchange, freezing $30M in USDT. Russia now seeks a domestic stablecoin to bypass restrictions.