Do Son Unprotected APIs exposed sensitive data of over 33,000 employees. CloudSEK's BeVigil discovered the security flaw
security
4chan was hit by a cyberattack resulting in the leak of source code, user data, and admin info. The forum is currently inaccessible
A curated list of the top cybersecurity tools for 2025, covering reconnaissance, wireless hacking, password cracking, forensics, and more.
Android introduces auto-reboot after 72 hours of inactivity, enhancing data security. Google Play Services update implements this feature
CrushFTP vulnerabilities CVE-2025-32102 & CVE-2025-32103 enable SSRF and directory traversal. Update now to secure your file transfer server
Learn about Tor Browser, the Dark Web, and how to navigate it safely. This guide covers installation, configuration, security precautions, and the potential risks of exploring the dark web.
CVE-2024-58136: A security vulnerability in the Yii 2 PHP framework is being actively exploited. Learn about the risk and necessary updates.
A critical vulnerability in the Everest Forms WordPress plugin allows unauthenticated attackers to inject PHP Objects. Update to version 3.1.2 immediately to protect your site.
A critical vulnerability in the InstaWP Connect WordPress plugin allows unauthenticated attackers to include and execute arbitrary files. Update to version 0.1.0.86 immediately.
A vulnerability in Jenkins Docker images (CVE-2025-32754, CVE-2025-32755) allows SSH host key reuse, enabling attackers to intercept and modify build processes. Update to jenkins/ssh-agent 6.11.2 to mitigate.
Joomla has released security patches for critical SQL injection (CVE-2025-25226) and MFA bypass (CVE-2025-25227) vulnerabilities. Learn how to protect your Joomla site with urgent updates.
Cloud Software Group addresses critical code execution and data function vulnerabilities (CVE-2025-3114, CVE-2025-3115) in Spotfire products. Upgrade to the latest version to mitigate risks.
Microsoft integrates AMSI with Exchange and SharePoint Server to enhance security against attacks like SSRF and web shell deployment, protecting against sophisticated threats.
Arista Networks addresses a critical vulnerability (CVE-2024-12378) in EOS that can cause cleartext transmission of sensitive data. Upgrade to a patched version to secure Vxlan tunnels.
A critical use-after-free vulnerability (CVE-2025-31498) has been discovered and patched in the c-ares DNS library. Update to version 1.34.5 to mitigate potential risks.
SonicWall has patched three vulnerabilities (CVE-2025-23008, CVE-2025-23009, CVE-2025-23010) in its NetExtender VPN client. Update to version 10.3.2 or later to prevent privilege escalation and unauthorized access.
A critical vulnerability (CVE-2025-3102) in the SureTriggers WordPress plugin allows unauthenticated admin account creation, potentially exposing over 100,000 sites to full takeover. Update to version 1.0.79 immediately.
A vulnerability (CVE-2024-12556) in Kibana allows code injection via prototype pollution, file upload, and path traversal. Upgrade to the latest version or disable the integration assistant to mitigate this high-severity security risk.
The latest Chrome update addresses a high-severity "use after free" vulnerability in Site Isolation (CVE-2025-3066). Learn about the security risk and the importance of updating your Chrome browser
Attackers are using SourceForge to distribute malware, including a ClipBanker Trojan and a cryptocurrency miner, disguised as a Microsoft Office enhancement suite.
Discover Google's new security features for the Pixel 9 lineup, focusing on strengthening the cellular baseband, a critical component in mobile devices.
At the root cause of BLUFFS attacks are two novel vulnerabilities within the Bluetooth standard's session key derivation process.