In September 2025, the Node Package Manager (NPM) ecosystem was targeted by a series of sophisticated supply...
RCE
Recent analysis from the Picus Security Blue Report 2025 indicates a significant decline in the effectiveness of...
Fortra has issued an urgent security advisory concerning a newly identified vulnerability in its GoAnywhere Managed File...
Google has released an emergency security update for its Chrome browser to address a high-severity zero-day vulnerability,...
Apple has released security updates for older iPhone and iPad models, backporting a critical fix for a...
Samsung has released a critical security update addressing a remote code execution vulnerability that was actively exploited...
A significant surge in Akira ransomware activity, first observed in late July 2025, has been attributed to...
Microsoft’s September 2025 Patch Tuesday has been released, addressing a total of 81 security vulnerabilities across its...
SAP has released patches for 21 new security flaws, including three critical vulnerabilities in its widely used...
A former head of security for WhatsApp has filed a lawsuit against Meta, accusing the social media...
A critical zero-day vulnerability in legacy Sitecore deployments, designated CVE-2025-53690, has been actively exploited by threat actors...
TP-Link has confirmed the existence of an unpatched zero-day vulnerability impacting multiple router models, as the U.S....
The weaponization of geolocation data represents one of the most significant shifts in offensive cyber operations, transforming...
Google’s September 2025 Android security bulletin addresses a significant security event, patching 120 vulnerabilities across the platform...
Click Studios, the developer of the Passwordstate enterprise password manager, has issued an urgent warning to its...
Citrix has released emergency patches for a critical remote code execution vulnerability, tracked as CVE-2025-7775, affecting its...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in the Git distributed...
Internet intelligence firm GreyNoise has identified a significant and coordinated surge in scanning activity directed at Microsoft...
A new class of attack, exploiting the image preprocessing pipelines of multimodal AI systems, has been demonstrated...
A critical vulnerability in Docker Desktop for Windows and macOS, designated CVE-2025-9074, has been patched after it...
