Exposed API documentation has become a prime target for threat actors, providing a clear blueprint of system...
authorization bypass
Administrators and security teams are urged to patch CrushFTP servers immediately following active exploitation of a critical...
Microsoft is currently investigating intermittent access issues affecting SharePoint Online, as confirmed by the company’s status updates1....
A critical vulnerability affecting 689 Brother printer models, along with devices from Fujifilm, Toshiba, and Konica Minolta,...
A critical privilege escalation vulnerability (CVE-2025-4322) in the WordPress Motors theme is being actively exploited in the...
Microsoft has announced a significant security update for Microsoft 365 tenants, set to roll out between mid-July...
BeyondTrust has issued critical security updates to address a high-severity Server-Side Template Injection (SSTI) vulnerability in its...
Asana, the work management platform, has notified customers of a data exposure incident involving its Model Context...
A critical vulnerability chain in Sitecore Experience Platform (XP) allows attackers to gain full server control starting...
Trend Micro has released urgent security updates addressing multiple critical-severity vulnerabilities in its Apex Central and Endpoint...
Hewlett Packard Enterprise (HPE) has issued an urgent security bulletin warning of eight vulnerabilities in its StoreOnce...
Multiple critical vulnerabilities in Versa Networks’ Concerto platform remain unpatched, exposing enterprise networks to authentication bypass and...
A critical authentication bypass vulnerability (CVE-2025-47949) in the Node.js SAML library samlify allows attackers to forge admin-level...
Ivanti has issued an urgent patch advisory for two zero-day vulnerabilities (CVE-2025-4427 and CVE-2025-4428) affecting its Endpoint...
Ivanti has issued urgent security updates for its Neurons for ITSM IT service management solution, addressing a...
A recent security disclosure highlights how a seemingly robust frontend regex filter in a username field was...
A critical zero-click vulnerability in Microsoft’s Telnet Client (telnet.exe) has been identified, allowing attackers to steal Windows...
A widespread phishing campaign targeting WooCommerce store owners has been identified, leveraging fabricated security vulnerability alerts to...
Security researcher Alessandro Sgreccia (aka “rainpwn”) has disclosed critical vulnerabilities in Zyxel’s USG FLEX-H firewall series, enabling...
A critical authentication bypass vulnerability (CVE-2023-44752) has been identified in the Apache Student Study Center Desk Management...
