Roundcube Webmail, a widely-used browser-based IMAP client, has patched a critical security vulnerability, tracked as CVE-2025-49113 (CVSS...
cybersecurity
Esri has issued a critical security patch for its widely used Portal for ArcGIS software, addressing a...
A newly disclosed vulnerability in the Fabio load balancer, tracked as CVE-2025-48865, allows malicious clients to manipulate...
A serious data exposure incident in the aviation industry has been uncovered by CloudSEK’s BeVigil platform, revealing...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory warning of two critical security...
Veritas has issued a security advisory warning users of its Desktop Laptop Option (DLO) platform about two...
Security researchers at Rapid7 have uncovered a troubling trio of vulnerabilities in MICI Network Co., Ltd.’s NetFax...
Socket’s Threat Research Team has uncovered a sophisticated supply chain attack on the Python Package Index (PyPI)...
In a detailed investigation, NetSPI security researchers have uncovered multiple high-risk local privilege escalation (LPE) vulnerabilities in...
Cybersecurity researchers at Darktrace have exposed a stealthy and persistent Linux-based botnet dubbed PumaBot, which leverages Go...
Hitachi Energy has issued a cybersecurity advisory warning of multiple vulnerabilities impacting its Asset Suite product—a widely...
A newly disclosed vulnerability in Perl’s threading mechanism, tracked as CVE-2025-40909, exposes systems to race conditions involving...
A serious security vulnerability has been discovered in Apache Superset, a widely used open-source data exploration and...
Netwrix, a provider of identity governance and access management solutions, has issued a critical security advisory warning...
Since September 2023, Trustwave’s Threat Intelligence Team has been tracking a sophisticated phishing ecosystem operated by Storm-1575,...
As tensions flared between India and Pakistan during Operation Sindoor on May 7, 2025, a covert cyber...
A critical vulnerability—CVE-2025-20188—has been disclosed in Cisco IOS XE Wireless LAN Controller (WLC) software, allowing unauthenticated attackers...
ConnectWise, a prominent provider of IT management solutions, has issued a brief but concerning security advisory disclosing...
A newly disclosed vulnerability in Spring Cloud Gateway Server could expose applications to header spoofing and potential...
IBM has issued a critical security update for its Tivoli Monitoring suite, addressing a high-severity vulnerability that...