Microsoft has closed out the year with a substantial security update, addressing 72 vulnerabilities across its ecosystem...
rce
Ivanti has rolled out an urgent security update for its Endpoint Manager (EPM) solution, patching a cluster...
A critical security vulnerability has been discovered in n8n, the popular workflow automation tool that powers technical...
Security researchers have uncovered a sprawling botnet operation fueled not by a state-sponsored APT, but by a...
Only hours after the public disclosure of a critical vulnerability in the React ecosystem, state-sponsored cyber espionage...
A high-severity security flaw has been uncovered in Cacti, the popular open-source network graphing solution. The vulnerability,...
Developers using the modern stack of Next.js and React are facing a “red alert” situation today. A...
In a display of vulnerability chaining, security researcher Kiddo has released a detailed write-up demonstrating how three...
Ideally, text editors are passive tools—you open a file, edit it, and save it. But a new...
A critical security vulnerability carrying a near-maximum severity score has been discovered in “Advanced Custom Fields: Extended,”...
A critical security vulnerability has been identified in the Longwatch video surveillance and monitoring system developed by...
Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
Critical Unpatched Flaw: Vivotek EOL IP Cameras Exposed to Unauthenticated RCE via Command Injection
The Akamai Security Intelligence and Response Team (SIRT) has uncovered a previously undocumented — and still widely...
A newly disclosed high-severity vulnerability in vLLM—one of the fastest-growing open-source inference engines for large language models—allows...
The CERT Coordination Center (CERT/CC) has issued a warning about multiple unpatched command injection vulnerabilities affecting Tenda’s...
ABB has issued an urgent cybersecurity advisory warning customers of a critical authentication bypass vulnerability in the...
A critical vulnerability (CVE-2025-65108) has been disclosed in the widely used Markdown to PDF npm package, a...
SonicWall has released security updates addressing two vulnerabilities in its Email Security appliances, including one that could...
The AhnLab Security Intelligence Center (ASEC) has uncovered an active exploitation campaign in which threat actors weaponized...
Apache Causeway, a popular framework for rapidly developing domain-driven Java applications, has been found vulnerable to a...
Fortinet has issued an urgent advisory warning customers that a newly disclosed vulnerability in FortiWeb, tracked as...