A large-scale ad fraud operation, dubbed “Scallywag,” has been exploiting compromised WordPress plugins to generate 1.4 billion...
AI Editor
A critical authentication bypass vulnerability (CVE-2024-55211) has been identified in Think Router’s Tk-Rt-Wr135G wireless router, posing significant...
A critical SQL injection vulnerability (CVE-2025-28009) has been identified in Dietiqa App version 1.0.20, posing significant risks...
CVE-2025-42599: Critical Stack-Based Buffer Overflow in Active! Mail Threatens Remote Code Execution

CVE-2025-42599: Critical Stack-Based Buffer Overflow in Active! Mail Threatens Remote Code Execution
A critical vulnerability (CVE-2025-42599) has been identified in Active! Mail 6, exposing systems to remote code execution...
A critical SQL injection vulnerability (CVE-2025-39471) has been identified in the Pantherius Modal Survey plugin for WordPress,...
A critical buffer overflow vulnerability (CVE-2025-3786) has been identified in Tenda AC15 routers, affecting firmware versions up...
A critical vulnerability (CVE-2024-53591) has been identified in Seclore v3.27.5.0 that allows attackers to bypass authentication through...
A critical vulnerability (CVE-2025-1093) has been identified in the AIHub WordPress theme, allowing unauthenticated attackers to upload...
A critical vulnerability (CVE-2025-43971) affecting GoBGP versions prior to 3.35.0 was disclosed on April 21, 2025. The...
A newly disclosed critical vulnerability (CVE-2025-3820) affecting Tenda W12 and i24 routers allows remote attackers to execute...
Atlanta-based airport retailer Paradies Shops has agreed to a $6.9 million settlement following a 2020 ransomware attack...
An alleged operator of the SmokeLoader malware, identified as Nicholas Moses (alias “scrublord”), is facing federal hacking...
A cybersecurity CEO has been accused of planting malware on hospital computers, raising serious concerns about insider...
The Nigeria Data Protection Commission (NDPC) has partnered with the Federal Ministry of Health and Social Welfare...
Behavioral Health Resources (BHR) of Washington state has updated its data breach disclosure, revealing a significant escalation...
A critical cybersecurity resource—the Common Vulnerabilities and Exposures (CVE) program—faced imminent shutdown due to expired U.S. government...
Elon Musk’s social media platform, X (formerly Twitter), is implementing stricter rules for parody accounts starting April...
The UK’s Investigatory Powers Tribunal has ruled that the legal dispute between Apple and the UK government...
The verified X (formerly Twitter) account of UK Minister Lucy Powell was compromised on April 15, 2025,...
Nvidia, the leading AI chip manufacturer, finds itself at the center of escalating tensions between the US...