Western Digital has released firmware updates to address a critical-severity vulnerability in multiple My Cloud Network Attached...
Critical Vulnerabilities
A critical vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) software, tracked as CVE-2025-10035, was actively exploited...
Security researchers have identified new vulnerabilities in Supermicro’s Baseboard Management Controller (BMC) firmware that allow attackers to...
A recently disclosed vulnerability in Microsoft’s Entra ID (formerly Azure AD) identity management service could have allowed...
Fortra has issued an urgent security advisory concerning a newly identified vulnerability in its GoAnywhere Managed File...
Microsoft’s September 2025 Patch Tuesday has been released, addressing a total of 81 security vulnerabilities across its...
SAP has released patches for 21 new security flaws, including three critical vulnerabilities in its widely used...
A critical zero-day vulnerability in legacy Sitecore deployments, designated CVE-2025-53690, has been actively exploited by threat actors...
Google’s September 2025 Android security bulletin addresses a significant security event, patching 120 vulnerabilities across the platform...
Click Studios, the developer of the Passwordstate enterprise password manager, has issued an urgent warning to its...
Citrix has released emergency patches for a critical remote code execution vulnerability, tracked as CVE-2025-7775, affecting its...
A new class of attack, exploiting the image preprocessing pipelines of multimodal AI systems, has been demonstrated...
A critical vulnerability in Docker Desktop for Windows and macOS, designated CVE-2025-9074, has been patched after it...
A newly disclosed class of vulnerabilities in browser extensions for major password managers exposes tens of millions...
The Pennsylvania Attorney General’s Office (AGO) has confirmed a cyberattack that disrupted critical systems, including email services,...
Microsoft has released cumulative updates KB5063878 and KB5063875 for Windows 11 versions 24H2 and 23H2, addressing 107...
Microsoft’s August 2025 Patch Tuesday addresses 107 security vulnerabilities, including one actively exploited zero-day in Windows Kerberos....
As of August 2025, more than 3,300 Citrix NetScaler devices remain vulnerable to CitrixBleed 2 (CVE-2025-5777), a...
A critical WinRAR vulnerability, tracked as CVE-2025-8088, was actively exploited as a zero-day in phishing campaigns to...
Administrators and security teams are urged to patch CrushFTP servers immediately following active exploitation of a critical...
