ASUS has issued a security advisory concerning a critical authentication bypass vulnerability, tracked as CVE-2025-59367, affecting several...
Critical Vulnerabilities
A critical vulnerability in Gladinet’s Triofox file-sharing platform has been actively exploited by threat actors to bypass...
SAP has released its November 2025 security updates, a critical patch batch addressing 18 new security notes...
A critical security vulnerability in the Service Finder WordPress theme and its accompanying Bookings plugin is being...
A critical vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) software, tracked as CVE-2025-10035, is being actively...
A significant security vulnerability, tracked as CVE-2025-59489, has been identified within the Unity game engine, posing a...
Security researchers have identified a new zero-day attack campaign targeting Zimbra Collaboration Suite (ZCS) that leverages malicious...
Western Digital has released firmware updates to address a critical-severity vulnerability in multiple My Cloud Network Attached...
A critical vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) software, tracked as CVE-2025-10035, was actively exploited...
Security researchers have identified new vulnerabilities in Supermicro’s Baseboard Management Controller (BMC) firmware that allow attackers to...
A recently disclosed vulnerability in Microsoft’s Entra ID (formerly Azure AD) identity management service could have allowed...
Fortra has issued an urgent security advisory concerning a newly identified vulnerability in its GoAnywhere Managed File...
Microsoft’s September 2025 Patch Tuesday has been released, addressing a total of 81 security vulnerabilities across its...
SAP has released patches for 21 new security flaws, including three critical vulnerabilities in its widely used...
A critical zero-day vulnerability in legacy Sitecore deployments, designated CVE-2025-53690, has been actively exploited by threat actors...
Google’s September 2025 Android security bulletin addresses a significant security event, patching 120 vulnerabilities across the platform...
Click Studios, the developer of the Passwordstate enterprise password manager, has issued an urgent warning to its...
Citrix has released emergency patches for a critical remote code execution vulnerability, tracked as CVE-2025-7775, affecting its...
A new class of attack, exploiting the image preprocessing pipelines of multimodal AI systems, has been demonstrated...
A critical vulnerability in Docker Desktop for Windows and macOS, designated CVE-2025-9074, has been patched after it...