A new phishing and malware distribution toolkit called MatrixPDF enables attackers to convert ordinary PDF files into...
RCE
Western Digital has released firmware updates to address a critical-severity vulnerability in multiple My Cloud Network Attached...
A critical vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) software, tracked as CVE-2025-10035, was actively exploited...
A software supply chain attack targeting the Rust programming language ecosystem has been uncovered, involving malicious packages...
Security researchers have identified new vulnerabilities in Supermicro’s Baseboard Management Controller (BMC) firmware that allow attackers to...
A newly identified vulnerability in multiple versions of OnePlus’s OxygenOS allows any application installed on a device...
In September 2025, the Node Package Manager (NPM) ecosystem was targeted by a series of sophisticated supply...
Recent analysis from the Picus Security Blue Report 2025 indicates a significant decline in the effectiveness of...
Fortra has issued an urgent security advisory concerning a newly identified vulnerability in its GoAnywhere Managed File...
Google has released an emergency security update for its Chrome browser to address a high-severity zero-day vulnerability,...
Apple has released security updates for older iPhone and iPad models, backporting a critical fix for a...
Samsung has released a critical security update addressing a remote code execution vulnerability that was actively exploited...
A significant surge in Akira ransomware activity, first observed in late July 2025, has been attributed to...
Microsoft’s September 2025 Patch Tuesday has been released, addressing a total of 81 security vulnerabilities across its...
SAP has released patches for 21 new security flaws, including three critical vulnerabilities in its widely used...
A former head of security for WhatsApp has filed a lawsuit against Meta, accusing the social media...
A critical zero-day vulnerability in legacy Sitecore deployments, designated CVE-2025-53690, has been actively exploited by threat actors...
TP-Link has confirmed the existence of an unpatched zero-day vulnerability impacting multiple router models, as the U.S....
The weaponization of geolocation data represents one of the most significant shifts in offensive cyber operations, transforming...
Google’s September 2025 Android security bulletin addresses a significant security event, patching 120 vulnerabilities across the platform...
