Ivanti has issued an urgent patch advisory for two zero-day vulnerabilities (CVE-2025-4427 and CVE-2025-4428) affecting its Endpoint...
RCE
Microsoft’s May 2025 Patch Tuesday has delivered critical security updates addressing 72 vulnerabilities, including five zero-days actively...
Fortinet has released urgent security updates to address a critical remote code execution (RCE) vulnerability actively exploited...
Ivanti has issued urgent security updates for its Neurons for ITSM IT service management solution, addressing a...
A newly discovered vulnerability in Intel CPUs, dubbed “Branch Privilege Injection,” allows attackers to extract sensitive data...
A recent security disclosure highlights how a seemingly robust frontend regex filter in a username field was...
Mozilla has addressed multiple high-severity vulnerabilities in Firefox and Thunderbird, specifically affecting versions below 138 and 128.10....
Google has addressed 46 security flaws in its May 2025 Android security updates, including a high-severity vulnerability...
A critical zero-click vulnerability in Microsoft’s Telnet Client (telnet.exe) has been identified, allowing attackers to steal Windows...
A critical pre-authentication denial-of-service (DoS) vulnerability in Microsoft’s Windows Deployment Services (WDS) allows attackers to crash systems...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding an actively exploited remote...
A high-severity vulnerability (CVE-2025-4279) has been identified in the WordPress External Image Replace plugin, enabling authenticated attackers...
A critical command injection vulnerability (CVE-2025-45042) has been identified in Tenda AC9 routers running firmware version 15.03.05.14,...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has escalated the urgency around a critical vulnerability in...
A critical vulnerability in OpenCTI, tracked as CVE-2025-24977, allows authenticated users to execute arbitrary commands on the...
Apple’s AirPlay protocol, a proprietary wireless technology used for streaming audio and video across devices, was found...
The US Cybersecurity and Infrastructure Security Agency (CISA) has officially added two critical vulnerabilities affecting SonicWall Secure...
April 2025 marked one of the most intense periods for cybersecurity professionals worldwide, with unprecedented levels of...
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog with CVE-2025-31324,...
A set of critical vulnerabilities in Apple’s AirPlay Protocol and AirPlay SDK, collectively dubbed “AirBorne,” exposes devices...
