Sensata Technologies, a global industrial sensor manufacturer, confirmed a ransomware attack in April 2025 that compromised sensitive...
Exploit
Technical details surrounding CVE-2025-20188, a maximum-severity arbitrary file upload vulnerability affecting Cisco IOS XE Wireless LAN Controller...
A recent campaign involving over 100 malicious Google Chrome extensions has been discovered impersonating legitimate tools such...
SK Telecom, South Korea’s largest telecommunications provider, disclosed in April 2025 that a malware breach had persisted...
Twilio has denied claims of a security breach after a threat actor allegedly leaked 89 million Steam...
A modified version of the encrypted messaging app Signal, used by Trump administration officials, was compromised in...
A developer at Elon Musk’s artificial intelligence company xAI accidentally leaked a private API key on GitHub,...
South Korea’s largest mobile carrier, SK Telecom (SKT), is scrambling to contain the fallout from a massive...
A critical SQL injection vulnerability (CVE-2025-4039) has been identified in PHPGurukul’s Rail Pass Management System version 1.0,...
The abrupt shutdown of BreachForums, a major cybercrime marketplace, on April 15, 2025, has left the cybersecurity...
The Oregon Department of Environmental Quality (DEQ) has refused to confirm whether employee data was exfiltrated during...
The latest Metasploit Framework update introduces significant improvements for Active Directory Certificate Services (AD CS) exploitation, particularly...
In August 2024, cybercriminals executed one of the largest single-victim cryptocurrency thefts in history, stealing $243 million...
A stored cross-site scripting (XSS) vulnerability has been identified in Garage Management System 1.0, specifically affecting the...
A critical unauthenticated Cross-Site Scripting (XSS) vulnerability has been identified in ABB Cylon Aspect firmware version 4.00.00,...
KiviCare Clinic & Patient Management System (EHR) 3.6.4 SQL Injection Vulnerability (CVE-2024-11728)

KiviCare Clinic & Patient Management System (EHR) 3.6.4 SQL Injection Vulnerability (CVE-2024-11728)
A critical unauthenticated SQL injection vulnerability (CVE-2024-11728) has been identified in KiviCare Clinic & Patient Management System...
A critical supply chain attack has compromised Ripple’s official xrpl.js NPM package, injecting malicious code designed to...
A recently disclosed vulnerability in the code-projects Online Exam Mastering System 1.0 exposes users to reflected Cross-Site...
Baltimore Public Schools Ransomware Attack: Technical Breakdown of Black Basta’s VMware ESXi Exploit

Baltimore Public Schools Ransomware Attack: Technical Breakdown of Black Basta’s VMware ESXi Exploit
In February 2024, Baltimore City Public Schools suffered a significant ransomware attack compromising over 25,000 records of...
South Korea’s largest mobile operator, SK Telecom, has confirmed a malware attack compromising sensitive USIM-related customer data,...