Security researchers have identified new vulnerabilities in Supermicro’s Baseboard Management Controller (BMC) firmware that allow attackers to...
Red-Team
A newly identified vulnerability in multiple versions of OnePlus’s OxygenOS allows any application installed on a device...
A new proof-of-concept tool named EDR-Freeze demonstrates a significant evolution in attacker evasion techniques. Developed by security...
A recently disclosed vulnerability in Microsoft’s Entra ID (formerly Azure AD) identity management service could have allowed...
Fortra has issued an urgent security advisory concerning a newly identified vulnerability in its GoAnywhere Managed File...
Google has released an emergency security update for its Chrome browser to address a high-severity zero-day vulnerability,...
Apple has released security updates for older iPhone and iPad models, backporting a critical fix for a...
Samsung has released a critical security update addressing a remote code execution vulnerability that was actively exploited...
A significant surge in Akira ransomware activity, first observed in late July 2025, has been attributed to...
SAP has released patches for 21 new security flaws, including three critical vulnerabilities in its widely used...
A critical zero-day vulnerability in legacy Sitecore deployments, designated CVE-2025-53690, has been actively exploited by threat actors...
TP-Link has confirmed the existence of an unpatched zero-day vulnerability impacting multiple router models, as the U.S....
Google’s September 2025 Android security bulletin addresses a significant security event, patching 120 vulnerabilities across the platform...
Click Studios, the developer of the Passwordstate enterprise password manager, has issued an urgent warning to its...
Citrix has released emergency patches for a critical remote code execution vulnerability, tracked as CVE-2025-7775, affecting its...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in the Git distributed...
A new class of attack, exploiting the image preprocessing pipelines of multimodal AI systems, has been demonstrated...
A critical vulnerability in Docker Desktop for Windows and macOS, designated CVE-2025-9074, has been patched after it...
Apple has released emergency security updates to address a zero-day vulnerability actively exploited in what the company...
A newly disclosed class of vulnerabilities in browser extensions for major password managers exposes tens of millions...