Hackers turn Cisco and Citrix zero-days into a malware nightmare

The researchers discovered the intrusion while investigating a Citrix Bleed Two vulnerability which was also being exploited ...
Infosecurity Magazine

Hackers Exploit Critical Flaw in Gladinet's Triofox File Sharing Product

Threat actors were exploiting vulnerable versions of Triofox after a patched version was released, said Google Cloud ...

Monsta FTP: Critical Vulnerability Allows Attackers to Execute Malicious Code

In Monsta FTP, a web-based FTP client, attackers can inject and execute malicious code through a vulnerability.
Cybernews

Previously unseen spyware targets Samsung Galaxy owners

A new commercial-grade Android spyware, dubbed Landfall, has been discovered exploiting zero-day vulnerabilities in Samsung ...
SecurityWeek

QNAP Patches Vulnerabilities Exploited at Pwn2Own Ireland

QNAP patched two dozen vulnerabilities across its product portfolio, including 7 flaws demonstrated at Pwn2Own Ireland 2025.
InfoQ

Redis Critical Remote Code Execution Vulnerability Discovered after 13 Years

This critical (CVSS 10.0) use-after-free (UAF) vulnerability in Lua scripting could allow authenticated attackers to execute ...