This critical (CVSS 10.0) use-after-free (UAF) vulnerability in Lua scripting could allow authenticated attackers to execute ...

Cybersecurity researchers at Google’s Mandiant Threat Defense have uncovered active exploitation of an unauthenticated access ...

Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud ...

QNAP patched two dozen vulnerabilities across its product portfolio, including 7 flaws demonstrated at Pwn2Own Ireland 2025.

Critical58Important0Moderate0LowMicrosoft addresses 63 CVEs including one zero-day vulnerability which was exploited in the ...

Cisco announced patches for nearly a dozen vulnerabilities, including two critical flaws leading to remote code execution.

Security teams may have a less burdensome rollout in November after October's Goliath Patch Tuesday, but shouldn't wait on ...

Security researchers SecurityBridge, who notified SAP after finding the flaw, described as a “missing input sanitation” ...

The zero-day vulnerability that has been listed as exploited in Tuesday's update is CVE-2025-62215 (CVSS score: 7.0), a ...

PKCERT has issued a critical security advisory of a remote code execution (RCE) vulnerability in Windows Server Update Services.

Cisco warned this week that two vulnerabilities, which have been exploited in zero-day attacks, are now being abused to force ...

LANDFALL spyware exploited a Samsung Galaxy flaw (CVE-2025-21042) via WhatsApp images before April 2025 patch.