High-severity TARmageddon flaw (CVE-2025-62518) in Rust’s async-tar libraries enables RCE via header parsing bug.

"Attackers are leveraging the unauthenticated command injection in ICTBroadcast via the BROADCAST cookie to gain remote code ...

If you’re among the 3.5 billion people using Google Chrome on Windows, Mac, Linux, or Android, it’s time to pay attention.

Two recently discovered security flaws could make 7-Zip a serious risk to data and system security. These bugs had been known internally for months, and 7-Zip ...

Researchers warn of fileless payloads, memory hooks, and a UDP-based C2 controller that complicate detection and remediation.

Researchers at Edera say they have uncovered a critical boundary-parsing bug, dubbed TARmageddon ( CVE-2025-62518 ), in the popular async-tar Rust library. And not only is it in this library, but also ...

A critical out-of-bounds write flaw (CVE-2025-9242) in WatchGuard Fireware OS could allow remote code execution ...

The Redis security team has released patches for a maximum severity vulnerability that could allow attackers to gain remote code execution on thousands of vulnerable instances. Redis (short for Remote ...

Microsoft released emergency updates on Friday morning for a WSUS security vulnerability. It is now being attacked on the ...

On Friday morning, Microsoft released an emergency update for a critical security vulnerability in WSUS. An exploit has been ...

Microsoft is restricting access to Internet Explorer mode in Edge browser after learning that hackers are leveraging zero-day ...

According to Microsoft's investigation, the attack chain started when users were tricked into visiting exploitative websites.