Do Son Windows 11 is enhancing admin protection by requiring Windows Hello for sensitive tasks and app access to camera, mic, and location.
security
Chrome can now automatically change compromised passwords for you, making your online accounts more secure after a data breach.
A critical containerd flaw (CVE-2025-47290) allows malicious container images to hijack the host filesystem. Update to version 2.1.1 now.
A critical vulnerability (CVE-2025-40634) in TP-Link Archer AX50 routers allows remote code execution as root. A public PoC increases the risk.
A critical DNSdist vulnerability allows unauthenticated attackers to launch DoS attacks, disrupting DNS operations. Update now to secure your system.
A critical flaw in Broadcom's Automic Automation Agent for Unix exposes systems to privilege escalation. Check your version and update to stay secure.
A critical OpenPGP.js flaw (CVE-2025-47934) allows attackers to spoof message signatures and manipulate content. Update to fix this risk.
Learn about new vulnerabilities in VMware Cloud Foundation that could lead to unauthorized access, info disclosure, and unapproved actions.
High DoS risk in Multer! These flaws threaten millions of Node.js applications. Update now to avoid these attacks.
Critical vulnerability (CVSS 9.9) in samlify! This flaw puts many SSO implementations at risk, affecting a library with 768,000+ monthly downloads.
A Spring Framework vulnerability can allow unauthorized access! Learn how it bypasses security annotations and how to fix it.
RAGFlow is vulnerable to account takeover. This article details the brute-force exploit and the urgent security risk (CVE-2025-48187, No Patch)
iOS is vulnerable! Learn about the dirtyZero exploit and how it allows system customization without jailbreak. Details on CVE-2025-24203.
Critical vulnerability (CVSS 9.1) in Auth0-PHP SDK! This flaw threatens applications with over 16 million downloads. Update now to avoid brute force attacks.
Tornado is vulnerable to DoS attacks due to its default parser. Details on CVE-2025-47287 and how to mitigate the high-severity threat.
Learn about the Label Studio XSS flaw (CVE-2025-47783) that allows attackers to inject malicious scripts. Protect your data labeling projects.
glibc vulnerability CVE-2025-4802 could allow attackers to hijack setuid binaries on Linux systems, putting millions at risk.
Discover a serious Reflex Python framework vulnerability and how to fix it. Learn about the CVE-2025-47425 flaw and secure your web applications.
Urgent security alert! I-O DATA NAS devices vulnerable. A critical 9.8 CVSS flaw (CVE-2025-32002) enables remote command execution. Update firmware now!
Russia-linked APT28 (Sednit/Fancy Bear) targets vulnerable webmail with XSS in Operation RoundPress, stealing data from global entities.
SonicWall fixes CVE-2025-40595, a high-severity SSRF flaw in SMA1000 appliances. Patch now to block remote encoded URL exploitation.
Zoom fixes critical CVE-2025-30663 flaw allowing local privilege escalation. Users urged to update Workplace apps and SDKs to version 6.4.0 or newer.