Do Son macOS 16 will introduce iOS-like clipboard permissions! Learn how this change will prevent apps from secretly accessing your copied data and protect against threats
security
A security audit reveals critical flaws in GNU Screen, including a root exploit. The flaws impact both Screen 5.0.0 and 4.9.x, posing a major risk to Linux/UNIX systems.
A massive, long-running proxy botnet using outdated IoT devices for criminal anonymity has been dismantled in a global law enforcement operation.
Broadcom releases a VMware Tools update to fix a Moderate severity file handling vulnerability (CVE-2025-22247) affecting Windows and Linux.
Defendnot disables Windows Defender using a novel method, directly interacting with the WSC. Learn how this new security tool works.
Bluetooth SIG announces version 6.1, focusing on enhanced privacy through randomized device addresses and improved energy efficiency.
Radware Cloud WAF has vulnerabilities (CVE-2024-56523, CVE-2024-56524) allowing attackers to bypass filtering via crafted HTTP requests and special characters.
Critical security vulnerability (CVE-2025-4318) in AWS Amplify Studio allows arbitrary code execution. Upgrade to version 2.20.3 immediately!
Chrome security update released! Patch CVE-2025-4096 and other flaws now to protect your system. Update Chrome immediately.
Discover SessionShark, a sophisticated phishing toolkit designed to bypass Microsoft Office 365 multi-factor authentication by stealing session tokens.
Report details how North Korean operatives use AI to create fake personas and infiltrate tech companies, funneling funds to the DPRK regime.
Critical security flaw (CVE-2024-54085) in AMI BMC software threatens PCs. ASUS releases urgent firmware updates for workstation motherboards. Update now!
CVE-2025-31324 lets attackers exploit SAP NetWeaver to upload webshells and deploy C2 tools like Brute Ratel, affecting patched enterprise systems.
Explore the rising threat of deepfakes and synthetic identities in remote work. Learn how to detect and prevent these deceptions in hiring and protect your organization.
CVE-2025-3616 in Greenshift plugin allows subscriber-level users to upload malicious files, enabling remote code execution on 50,000+ WordPress sites.
Microsoft highlights TPM 2.0 benefits to encourage Windows 10 users to buy new, compatible PCs for a secure Windows 11 upgrade before support ends.
Cellebrite's Android zero-day exploit (CVE-2024-53104) used in alleged spyware attempt on activist. Details, technical analysis, and patch info.
CVE-2025-32434: Critical RCE vulnerability in PyTorch’s torch.load(weights_only=True) affects ≤2.5.1. Update to v2.6.0 to patch this major flaw
Critical vulnerability (CVE-2025-42599) in Active! mail allows remote code execution. Update to the latest version immediately to protect your systems.
Critical RCE vulnerability (CVE-2025-24797) in Meshtastic allows remote takeover. Update to 2.6.2 immediately to stay safe.
GCVE introduces a decentralized system for vulnerability IDs, empowering organizations with autonomy and speed. Complements CVE for smoother vulnerability management.
Microsoft will disable ActiveX controls in Office 365 & 2024 to enhance security. Users can re-enable manually, but it poses security risks.