Germany’s Federal Data Protection Commissioner (BfDI) has imposed a record €45 million ($51.3 million) fine on Vodafone...
vulnerability
Cisco has issued patches for three high-severity vulnerabilities affecting its Identity Services Engine (ISE) and Customer Collaboration...
A recent campaign has been identified where threat actors are distributing malicious code through GitHub repositories, specifically...
Hewlett Packard Enterprise (HPE) has issued an urgent security bulletin warning of eight vulnerabilities in its StoreOnce...
Two malicious RubyGems packages have been discovered masquerading as popular Fastlane CI/CD plugins, designed to intercept and...
Mozilla has introduced a new security mechanism designed to detect and block malicious Firefox extensions that target...
Starting August 1, 2025, Google Chrome will no longer trust TLS certificates issued by Chunghwa Telecom (Taiwan)...
Qualcomm has addressed three critical zero-day vulnerabilities in its Adreno Graphics Processing Unit (GPU) driver that were...
Technical details surrounding CVE-2025-20188, a maximum-severity arbitrary file upload vulnerability affecting Cisco IOS XE Wireless LAN Controller...
ConnectWise, a leading IT management software provider, confirmed a cyberattack targeting its ScreenConnect remote access tool in...
A newly identified weakness in Apple’s Safari browser enables attackers to execute fullscreen browser-in-the-middle (BitM) attacks, potentially...
A newly discovered botnet named **PumaBot** is actively targeting Linux-based IoT devices by brute-forcing SSH credentials to...
Over 9,000 ASUS routers have been compromised by the “AyySSHush” botnet, which installs persistent SSH backdoors to...
Security teams are inundated with vulnerability alerts daily, but not every “critical” CVE warrants an emergency response....
Microsoft has released an out-of-band (OOB) update to address a critical issue causing Hyper-V virtual machines (VMs)...
Security researchers have identified 60 malicious packages in the NPM registry that collect sensitive host and network...
The Federal Trade Commission (FTC) has finalized a settlement requiring GoDaddy to implement sweeping security reforms after...
Multiple critical vulnerabilities in Versa Networks’ Concerto platform remain unpatched, exposing enterprise networks to authentication bypass and...
A critical authentication bypass vulnerability (CVE-2025-47949) in the Node.js SAML library samlify allows attackers to forge admin-level...
A recent campaign involving over 100 malicious Google Chrome extensions has been discovered impersonating legitimate tools such...