A critical privilege escalation vulnerability (CVE-2025-4322) in the WordPress Motors theme is being actively exploited in the...
High Risk
Microsoft has announced a phased removal of legacy drivers from the Windows Update catalog, a move aimed...
The Verizon 2025 Data Breach Investigations Report (DBIR) highlights critical cybersecurity trends, with system intrusions, social engineering,...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about attackers exploiting a high-severity vulnerability...
BeyondTrust has issued critical security updates to address a high-severity Server-Side Template Injection (SSTI) vulnerability in its...
A newly discovered vulnerability in the Linux udisks service (CVE-2025-6019) enables local attackers to escalate privileges to...
Veeam has released urgent security updates to address a critical remote code execution (RCE) vulnerability in its...
A critical vulnerability chain in Sitecore Experience Platform (XP) allows attackers to gain full server control starting...
Microsoft has confirmed an ongoing issue causing the classic Outlook email client to crash when opening or...
More than 46,000 internet-facing Grafana instances remain unpatched against a high-severity vulnerability (CVE-2025-4123) that chains an open...
Trend Micro has released urgent security updates addressing multiple critical-severity vulnerabilities in its Apex Central and Endpoint...
GitLab has released security updates addressing multiple high-severity vulnerabilities in its DevSecOps platform, including flaws that could...
Microsoft has addressed critical authentication failures affecting Windows Server domain controllers following the April 2025 security updates....
A newly disclosed Secure Boot vulnerability, tracked as CVE-2025-3052, allows attackers to disable security protections on PCs...
Microsoft’s June 2025 Patch Tuesday has arrived, delivering security updates for 66 vulnerabilities, including one actively exploited...
Google has addressed a high-severity vulnerability that allowed attackers to brute-force recovery phone numbers tied to user...
Two malicious npm packages, disguised as legitimate utilities, have been identified executing destructive actions against developer environments....
Germany’s Federal Data Protection Commissioner (BfDI) has imposed a record €45 million ($51.3 million) fine on Vodafone...
Cisco has issued patches for three high-severity vulnerabilities affecting its Identity Services Engine (ISE) and Customer Collaboration...
