Ivanti has issued an urgent patch advisory for two zero-day vulnerabilities (CVE-2025-4427 and CVE-2025-4428) affecting its Endpoint...
Zero-Day Exploits
Microsoft’s May 2025 Patch Tuesday has delivered critical security updates addressing 72 vulnerabilities, including five zero-days actively...
Fortinet has released urgent security updates to address a critical remote code execution (RCE) vulnerability actively exploited...
Google has addressed 46 security flaws in its May 2025 Android security updates, including a high-severity vulnerability...
A set of critical vulnerabilities in Apple’s AirPlay Protocol and AirPlay SDK, collectively dubbed “AirBorne,” exposes devices...
A newly disclosed vulnerability in Apache Tomcat, tracked as CVE-2025-23181, allows unprivileged command execution with a CVSS...
Recent research by NSFOCUS Fuying Laboratory has uncovered 19 distinct Advanced Persistent Threat (APT) campaigns targeting organizations...
A newly disclosed vulnerability in Apple’s iOS operating system (CVE-2025-24091) allows malicious applications to trigger an irreversible...
The fourth week of April 2025 saw significant developments in mobile security, particularly around Android malware campaigns...
TechCrunch’s updated Cyber Glossary serves as a definitive reference for security professionals, clarifying terminology used in modern...
The North Korea-linked Lazarus Group has launched a sophisticated campaign targeting at least six South Korean organizations...
A critical zero-day remote code execution (RCE) vulnerability in Active! Mail, a widely used Japanese webmail client,...
Ivanti has released critical patches for two zero-day vulnerabilities (CVE-2025-22457 and CVE-2025-0282) in its Connect Secure (ICS),...
A new wave of cyber threats targeting iPhone users has prompted urgent warnings from security experts. Malicious...
A newly disclosed path traversal vulnerability (CVE-2024-54291) in Apache’s NotFound PluginPass has been rated with a high...
Mozilla has issued an emergency update for Firefox on Windows to address a critical sandbox escape vulnerability...
Mozilla has released emergency updates to patch a critical sandbox escape vulnerability (CVE-2025-2857) in Firefox for Windows,...
The fourth week of March 2025 has brought significant developments in mobile security and malware, with critical...
Recent forensic investigations by Volexity have uncovered a sophisticated attack campaign exploiting two chained zero-day vulnerabilities in...
A critical zero-day vulnerability (CVE-2024-3400) in Palo Alto Networks’ PAN-OS firewalls has been actively exploited since at...
