Do Son
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog with four...
Vulnerability
A critical vulnerability has been uncovered in the widely used JavaScript library Form-Data, impacting millions of applications...
Google has released a new Stable Channel Update for Chrome Desktop, bringing the browser to version 138.0.7204.168/.169...
A newly disclosed critical vulnerability in Manager.io, a free accounting software used by businesses across Australia and...
Cisco has issued an urgent update to its security advisory, revealing that three critical remote code execution...
The Kubernetes project has issued an important advisory addressing a critical vulnerability—CVE-2025-7342 (CVSS 8.1)—in the Kubernetes Image...
Sophos has issued a security advisory detailing the remediation of five vulnerabilities in Sophos Firewall, including two...
Nokia’s WaveSuite NOC (WS-NOC) platform—an integral part of network operations for telecom and enterprise environments— exists two...
The developers of the lightweight TLS/SSL implementation wolfSSL have issued a security advisory addressing multiple vulnerabilities in...
JPCERT/CC has released a detailed technical report shedding light on a sustained and sophisticated malware campaign leveraging...
Apache Jena, a widely-used Java framework for building semantic web and linked data applications, has released an...
Sophos has patched three separate high-severity local privilege escalation (LPE) vulnerabilities in its widely used Intercept X...
A critical remote command execution (RCE) vulnerability has been discovered in Livewire, the popular full-stack framework for...
Researchers have disclosed two newly identified vulnerabilities in 7-Zip, one of the world’s most widely used open-source...
On the evening of July 18, 2025, Eye Security identified an active, large-scale exploitation of a newly...
Lenovo has issued a security advisory disclosing three newly discovered vulnerabilities in Lenovo Vantage, a widely pre-installed...
Microsoft has issued an urgent security advisory for on-premises SharePoint Server customers in response to active exploitation...
A critical SQL injection vulnerability in Fortinet FortiWeb, tracked as CVE-2025-25257, has been added to the CISA...
CrushFTP, a widely used secure file transfer server, has issued an urgent advisory regarding a critical zero-day...
NetSPI has uncovered a critical vulnerability in Forescout SecureConnector, a security agent meant to enforce endpoint compliance....