Do Son Google fixed 1,442 Chrome vulnerabilities across versions 149-151, surpassing the combined total of 23 prior releases, driven largely by AI-powered discovery.
Vulnerabilities
IBM WebSphere vulnerabilities like CVE-2026-11712 expose servers to severe XSS and path traversal attacks. Patch systems immediately.
Multiple Langflow OSS vulnerabilities, including the critical CVE-2026-10134 flaw, expose servers to code execution. Patch immediately.
New updates patch critical Squid proxy vulnerabilities. Secure your server against a heap buffer overflow attack and out-of-bounds reads today.
CISA, FBI, and NSA call for adopting memory-safe languages (Rust, Go, Java, Swift) to slash software vulnerabilities. Android saw a 52% drop in memory bugs after embracing MSLs.
WAGO Device Manager security updates address two vulnerabilities allowing unauthenticated remote access to sensitive system files.
B. Braun's OnlineSuite AP 3.0 faces severe vulnerabilities, including a CVSS 10.0 RCE, risking hospital IT and data. Immediate patching is crucial.
Urgent Acronis Cyber Protect advisory: Critical flaws (CVSS 10.0) expose data. Patch immediately to prevent unauthorized access and data manipulation.
Kaspersky's Q1 2025 report highlights a surge in attacks on aging systems, unpatched flaws, and mismanaged updates, urging vigilance and prompt action.
Hitachi Energy's Asset Suite, used in power gen, faces severe vulnerabilities including XSS, plaintext passwords, & RCE. Immediate action advised to secure systems.
CISA adds critical DrayTek router, Chrome, and SAP NetWeaver flaws to its KEV list after in-the-wild exploitation. Federal agencies face a June 5th patch deadline.
A Forescout report reveals critical vulnerabilities in solar power systems that could be exploited to destabilize power grids and compromise user data.
Week of April 7-13 saw critical Ivanti, WordPress, & Windows vulnerabilities exploited, plus major data breaches impacting millions.
Stay informed about the GRUB2 vulnerabilities that may compromise security on Linux. Get the details on these critical issues.
Uncover critical vulnerabilities in the Mercedes-Benz User Experience (MBUX) infotainment system. Learn about the security risks in connected vehicles.
Stay informed about the safety of modern vehicles. Discover the critical vulnerabilities in automotive systems and the potential consequences.
Stay informed about the OAuth vulnerability that could put your website and users at risk. Understand the implications of this flaw and take steps to secure your website.
ISC, the maintainers of the widely-used BIND DNS server software, has released security updates to address four high-severity vulnerabilities
SuiteCRM has released urgent security patches to address multiple critical vulnerabilities that could expose sensitive customer data and compromise system integrity
Researchers have demonstrated that teams of AI agents, powered by large language models, can successfully exploit zero-day vulnerabilities
Researchers have identified a concerning resurgence of attacks targeting known vulnerabilities in the ThinkPHP web application framework
Due to the critical severity of vulnerabilities CVE-2024-29972, CVE-2024-29973, and CVE-2024-29974, Zyxel has made patches available