CISA warns of active exploitation of Sierra Wireless router flaw allowing remote code execution via unrestricted file upload.

Apple fixes two exploited WebKit bugs targeting specific users, issuing security updates across iOS, macOS, and Safari.

Researchers detail new AI and phishing kits that steal credentials, bypass MFA, and scale attacks across major services.

Enterprises rely on browser-based GenAI, increasing data-exposure risks and demanding strict policies, isolation, and ...

PyStoreRAT spreads via fake GitHub tools using small Python or JavaScript loaders to fetch HTA files and install a modular ...

CISA reports active exploitation of GeoServer XXE flaw CVE-2025-58360 and directs immediate updates to secure affected ...

CISA warns that attackers are actively exploiting the React2Shell CVE-2025-55182 flaw, urging fast patching across vulnerable ...

Huntress reports active attacks abusing Gladinet’s fixed cryptographic keys to forge tickets and gain remote code execution ...

Vendors fix critical flaws across Fortinet, Ivanti, and SAP to prevent authentication bypass and remote code execution.

Research shows a .NET proxy design flaw enables file writes and RCE through attacker-supplied WSDL in multiple products.

Intellexa’s Predator spyware targeted a Pakistani lawyer, as new leaks show wide global use of zero-day exploits and advanced ...

Sophos reports STAC6565 targeting nearly 40 victims, with 80% of attacks hitting Canadian firms and involving QWCrypt ...