Google has addressed a high-severity vulnerability that allowed attackers to brute-force recovery phone numbers tied to user...
High Risk
Two malicious npm packages, disguised as legitimate utilities, have been identified executing destructive actions against developer environments....
Germany’s Federal Data Protection Commissioner (BfDI) has imposed a record €45 million ($51.3 million) fine on Vodafone...
Cisco has issued patches for three high-severity vulnerabilities affecting its Identity Services Engine (ISE) and Customer Collaboration...
Hewlett Packard Enterprise (HPE) has issued an urgent security bulletin warning of eight vulnerabilities in its StoreOnce...
Mozilla has introduced a new security mechanism designed to detect and block malicious Firefox extensions that target...
Starting August 1, 2025, Google Chrome will no longer trust TLS certificates issued by Chunghwa Telecom (Taiwan)...
Qualcomm has addressed three critical zero-day vulnerabilities in its Adreno Graphics Processing Unit (GPU) driver that were...
Technical details surrounding CVE-2025-20188, a maximum-severity arbitrary file upload vulnerability affecting Cisco IOS XE Wireless LAN Controller...
Over 9,000 ASUS routers have been compromised by the “AyySSHush” botnet, which installs persistent SSH backdoors to...
Security teams are inundated with vulnerability alerts daily, but not every “critical” CVE warrants an emergency response....
Microsoft has released an out-of-band (OOB) update to address a critical issue causing Hyper-V virtual machines (VMs)...
Multiple critical vulnerabilities in Versa Networks’ Concerto platform remain unpatched, exposing enterprise networks to authentication bypass and...
A critical authentication bypass vulnerability (CVE-2025-47949) in the Node.js SAML library samlify allows attackers to forge admin-level...
A critical privilege escalation vulnerability (CVE-2025-4322) has been identified in the premium WordPress Motors theme, allowing unauthenticated...
A recently discovered vulnerability in O2 UK’s implementation of Voice over LTE (VoLTE) and WiFi Calling technologies...
Microsoft has addressed a critical issue affecting dual-boot systems where Linux distributions failed to boot after installing...
Ivanti has issued an urgent patch advisory for two zero-day vulnerabilities (CVE-2025-4427 and CVE-2025-4428) affecting its Endpoint...
Microsoft’s May 2025 Patch Tuesday has delivered critical security updates addressing 72 vulnerabilities, including five zero-days actively...
Microsoft has released cumulative updates KB5058411 and KB5058405 for Windows 11 versions 24H2 and 23H2, addressing security...
