The 2025 Verizon Data Breach Investigations Report (DBIR) highlights a concerning 34% year-over-year increase in vulnerability exploitation,...
vulnerability
Maintaining honeypot configurations and analyzing DShield-SIEM logs presents unique challenges for security teams. A recent incident involving...
A critical zero-day remote code execution (RCE) vulnerability in Active! Mail, a widely used Japanese webmail client,...
Siemens TeleControl Server Basic (TCSB) has been identified with multiple critical SQL injection vulnerabilities affecting versions prior...
Apple iPhone users are being advised to review and disable several default settings that may expose them...
ABB’s medium voltage (MV) drives, widely used in industrial automation and critical infrastructure, have been found to...
Microsoft has released the optional KB5055612 preview cumulative update for Windows 10 22H2, addressing a critical GPU...
A newly documented proof-of-concept attack named “Cookie-Bite” demonstrates how malicious Chrome extensions can hijack browser session cookies...
A critical remote code execution (RCE) vulnerability, tracked as CVE-2025-34028, has been disclosed in Commvault Command Center...
A critical supply chain attack has compromised Ripple’s official JavaScript library, xrpl.js, injecting malicious code to steal...
A high-severity vulnerability (CVE-2025-2594) has been identified in the WordPress User Registration & Membership plugin, allowing unauthenticated...
A newly disclosed SQL injection vulnerability (CVE-2025-23176) in Apache Web Server has been rated with a CVSS...
A newly disclosed critical vulnerability in IBM’s Hardware Management Console (HMC) for Power Systems could allow local...
Recent findings by the Socket Threat Research Team reveal a growing trend of threat actors uploading malicious...
The Cybersecurity and Infrastructure Security Agency (CISA) published five Industrial Control Systems (ICS) advisories on April 22,...
A critical buffer overflow vulnerability in Symantec pcAnywhere, identified as CVE-2011-3478, allows unauthenticated attackers to execute arbitrary...
Display interfaces like HDMI, DVI, and DisplayPort contain overlooked attack surfaces that security professionals should understand. Research...
Traditional vulnerability management often focuses on individual CVEs, leading to fragmented remediation efforts. Rapid7’s Remediation Hub introduces...
A high-severity SQL injection vulnerability (CVE-2025-32956) has been identified in the ManageWiki MediaWiki extension, affecting versions prior...
A critical buffer overflow vulnerability (CVE-2025-3854) has been identified in H3C GR-3000AX routers running firmware versions up...