Do Son CISA adds 5 new exploited vulnerabilities to KEV, including flaws in ASUS routers, Craft CMS, and ConnectWise. Urgent patching required!
zero-day
Critical Chrome security update released! Patching an actively exploited zero-day vulnerability (CVE-2025-5419) and other flaws. Update now to stay safe!
Qualcomm discloses critical zero-day vulnerabilities in Snapdragon chipsets, actively exploited in targeted attacks. Immediate patching is crucial for millions of devices.
Apple patches a CoreAudio flaw exploited in the wild via malicious media files, enabling remote code execution. PoC now on GitHub.
A critical zero-day (CVE-2025-4428) in Ivanti EPMM is exploited by UNC5221, enabling unauthenticated RCE and data theft across multiple sectors.
A China-linked APT, UAT-6382, is actively exploiting a zero-day (CVE-2025-0994) in Cityworks to gain RCE and persistent access to government and utility systems.
ProjectDiscovery revealed critical zero-days (CVSS 10) in Versa Concerto, enabling full RCE and host compromise via auth bypass and Docker escape.
Grafana rushed an emergency patch for CVE-2025-4123, a high-severity XSS flaw that was made public. Upgrade now to prevent unauthorized access.
Pwn2Own Berlin saw VMware ESXi and Windows 11 compromised, along with Firefox. Researchers earned over $1M for 30+ zero-day exploits.
Details on a zero-day vulnerability (CVE-2025-31324) in SAP NetWeaver that allows file uploads and its link to the Qilin ransomware group.
Firefox was compromised at Pwn2Own using JavaScript zero-day exploits. Learn the details of the out-of-bounds write and integer overflow vulnerabilities.
Over 10,000 WordPress sites at risk from Eventin plugin flaw CVE-2025-47539. Attackers can gain admin access via unauthenticated API exploit.
CISA adds critical DrayTek router, Chrome, and SAP NetWeaver flaws to its KEV list after in-the-wild exploitation. Federal agencies face a June 5th patch deadline.
Google Chrome 136.0.7103.113/.114 patches 4 security bugs including CVE-2025-4664, a zero-day exploit found in the wild. Users urged to update immediately.
May 2025 Patch Tuesday fixes 83 Microsoft flaws, including 5 zero-days actively exploited. Critical updates address RCE and SYSTEM privilege bugs.
Fortinet warns CVE-2025-32756 is exploited in the wild. The critical RCE flaw affects FortiVoice, FortiMail, FortiNDR, and more. Patch immediately.
Urgent: SAP's May 2025 Security Patch Day reveals critical vulnerabilities! Learn about the latest threats and how to protect your systems. Act now to secure your SAP landscape
A cyber-espionage campaign linked to Türkiye is exploiting a zero-day flaw in Output Messenger to target entities in Iraq. Learn about the attack.
A zero-day privilege escalation vulnerability (CVE-2025-29824) in Microsoft CLFS was exploited by Balloonfly (Play ransomware) before the official patch.
Cellebrite's Android zero-day exploit (CVE-2024-53104) used in alleged spyware attempt on activist. Details, technical analysis, and patch info.
A misconfiguration exposed APT41 tools targeting Shiseido, revealing Fortinet exploit scripts, webshells, and reconnaissance tactics.
Apple releases urgent patches for zero-day flaws (CVE-2025-31200, CVE-2025-31201) targeting iPhones. Update now to protect your devices from sophisticated attacks.