WatchGuard has issued an urgent warning to customers regarding a critical, actively exploited remote code execution vulnerability...
RCE
On December 3, 2025, the React and Next.js ecosystems were alerted to a maximum-severity vulnerability enabling unauthenticated...
ASUS has issued an urgent security advisory addressing multiple critical vulnerabilities, including a severe authentication bypass flaw...
Microsoft has officially confirmed a critical bug in Windows 11 24H2 that causes the File Explorer, Start...
Grafana Labs has issued a critical security advisory for its Enterprise product, warning of a maximum severity...
Modern DevOps environments, built on platforms like GitHub, GitLab, and Azure DevOps, have accelerated software delivery but...
A widespread campaign known as ShadowRay is actively exploiting a critical, yet officially disputed, vulnerability in the...
Microsoft has announced a significant shift in its security strategy by integrating the System Monitor (Sysmon) tool...
Google has released an emergency security update for its Chrome browser to address CVE-2025-13223, a high-severity type...
A critical security vulnerability in the XWiki Platform, tracked as CVE-2025-24893, is now being actively exploited by...
Eurofiber France, a subsidiary of the Eurofiber Group, has confirmed a significant data breach discovered on November...
A novel twist in the ongoing ClickFix malware campaigns has security researchers observing the abuse of the...
ASUS has issued a security advisory concerning a critical authentication bypass vulnerability, tracked as CVE-2025-59367, affecting several...
A significant security threat has been identified within the consumer Internet of Things (IoT) market, specifically targeting...
The DanaBot malware operation has resumed its malicious activities, deploying a new version in active campaigns just...
A critical vulnerability in Gladinet’s Triofox file-sharing platform has been actively exploited by threat actors to bypass...
SAP has released its November 2025 security updates, a critical patch batch addressing 18 new security notes...
A new variant of the FileFix social engineering attack is leveraging cache smuggling to secretly download malicious...
A critical vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) software, tracked as CVE-2025-10035, is being actively...
