Recent reports highlight a surge in MSSQL injection attacks, with threat actors exploiting vulnerabilities to execute remote...
Vulnerability Management
The Huntress Agent, a widely deployed endpoint detection and response (EDR) tool, relies on its updater service...
A critical SQL injection vulnerability (CVE-2017-18362) in ConnectWise’s ManagedITSync integration exposed Kaseya VSA servers to unauthenticated remote...
When a database outage escalates into a full-blown security incident, the response strategy determines whether an organization...
A newly disclosed vulnerability in Apache Tomcat, tracked as CVE-2025-23181, allows unprivileged command execution with a CVSS...
A critical remote code execution (RCE) vulnerability has been identified in PhpGurukul’s Online Banquet Booking System (OBBS)...
A sophisticated phishing campaign is targeting WooCommerce users with fraudulent emails urging them to install a fake...
Not every security vulnerability poses an immediate high risk, but attackers often chain seemingly minor flaws to...
Microsoft’s introduction of hotpatching for Windows Server 2025 marks a significant shift in enterprise patch management. Starting...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three critical vulnerabilities to its Known Exploited...
Rapid7’s newly launched Remediation Hub, part of its Exposure Command platform, aims to transform how security teams...
Modern security teams face an overwhelming challenge: managing vulnerabilities across complex environments while balancing risk, compliance, and...
Over 1,200 internet-exposed SAP NetWeaver instances are vulnerable to an actively exploited maximum severity unauthenticated file upload...
Offensive Security has issued a warning to Kali Linux users regarding potential update failures due to the...
SberTech, a Russian software developer under the Sber ecosystem, has expanded its public bug bounty program on...
Recent research by NSFOCUS Fuying Laboratory has uncovered 19 distinct Advanced Persistent Threat (APT) campaigns targeting organizations...
The Service for Supporting the Activities of the Financial Ombudsman (ANO “SODFU”), established by the Central Bank...
A sophisticated multi-stage carding attack has been identified targeting Magento eCommerce sites running outdated versions, particularly Magento...
Rapid7 has released its Exposure Assessment Platform (EAP) Buyer’s Guide, a resource designed to help organizations navigate...
A critical stack-based buffer overflow vulnerability (CVE-2025-4007) has been identified in Tenda W12 and i24 routers, affecting...
