VULNERABILITIES 76
- Wiz ZeroDay.Cloud Event Reveals 20-Year-Old PostgreSQL Vulnerabilities
- Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass
- Hackers Exploit RCE Flaws in Qinglong Task Scheduler for Cryptomining
- PHP Composer Flaws Enable Remote Command Execution via Perforce VCS
- Why Your Deprecated Endpoints Are an Attacker's Best Friend The Rise of Ghost APIs
- Treasury Secretary and Fed Chair Summon Banking Executives Over AI Security Concerns
- How Often Are Redirects Used in Phishing in 2026?
- TP-Link, Canva, HikVision Vulnerabilities Disclosed
- TP-Link, Canva, HikVision Vulnerabilities Disclosed
- PolyShell Attacks Target 56% of All Vulnerable Magento Stores
- PolyShell Attacks Target 56% of All Vulnerable Magento Stores
- QNAP Fixes Four Vulnerabilities Demonstrated at Pwn2Own Ireland 2025
- QNAP Fixes Four Vulnerabilities Demonstrated at Pwn2Own Ireland 2025
- Scans for Adminer Understanding the Threat
- CODESYS Vulnerabilities in Festo Automation Suite
- CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root
- Alert Regarding Vulnerabilities in Adobe Acrobat and Reader
- Alert Regarding Vulnerabilities in Adobe Acrobat and Reader
- Vulnerabilities in Lantronix EDS3000PS and EDS5000
- Fixing Request Smuggling Vulnerabilities in Pingora OSS Deployments
- Cisco Fixes Maximum-Severity Secure FMC Bugs Threatening Firewall Security
- Five Eyes Urgent Warning Patch Your Cisco SD-WAN to Prevent Root Takeover!
- Critical Vulnerabilities Found in NesterSoft WorkTime
- Uncovering Vulnerabilities with 'Good Enough' Emulation
- Telegram Channels Expose Rapid Weaponization of SmarterMail Flaws
- Critical Vulnerabilities in GE Vernova Enervista UR Setup
- Pulling Back the Curtain on Warlock's Next Act
- Eradicating Trivial Vulnerabilities at Scale
- Eradicating Trivial Vulnerabilities at Scale
- Multiple Vulnerabilities Found in ELECOM Wireless LAN Products
- Multiple vulnerabilities in Cybozu Garoon
- Multiple Vulnerabilities Found in Cybozu Garoon
- Old Windows quirks help punch through new admin defenses
- Foxit, Epic Games Store, MedDreams vulnerabilities
- Schneider Electric devices using CODESYS Runtime
- AVEVA Process Optimization
- The State of Trusted Open Source
- From change prevention to continuous improvement - Automating patch cycles with guardrails, rings, and proof
- WhatsApp Vulnerabilities Leaks User’s Metadata Including Device’s Operating System
- Zeroday Cloud hacking event awards $320,0000 for 11 zero days
- Atlassian Patches Critical Apache Tika Flaw
- Google fixes two Android zero days exploited in attacks, 107 flaws
- Security researchers caution app developers about risks in using Google Antigravity
- Old tech, new vulnerabilities - NTLM abuse, ongoing exploitation in 2025
- Security Affairs newsletter Round 551 by Pierluigi Paganini – INTERNATIONAL EDITION
- Siemens COMOS
- Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities
- Dangerous runC flaws could allow hackers to escape Docker containers
- HackedGPT – 7 New Vulnerabilities in GPT-4o and GPT-5 Enables 0-Click Attacks
- Critical flaws in Fuji Electric, Delta Electronics, Survision, Radiometrics, IDIS systems raise security concerns for industrial sector
- Exploiting Microsoft Teams Impersonation and Spoofing Vulnerabilities Exposed
- OpenAI’s New Aardvark GPT-5 Agent that Detects and Fixes Vulnerabilities Automatically
- TP-Link warns of critical command injection flaw in Omada gateways
- Senate Investigates Cisco Over Zero-Day Firewall Vulnerabilities
- F5 releases BIG-IP patches for stolen security vulnerabilities
- Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors
- CISA issues Emergency Directive requiring federal agencies to mitigate critical Cisco ASA zero-day vulnerabilities
- Flaws in Software Used by Hundreds of Cities and Towns Exposed Sensitive Data
- Google's August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild
- ReVault! When your SoC turns against you…
- Hackers Regularly Exploit Vulnerabilities Before Public Disclosure, Study Finds
- Dahua Camera flaws allow remote hacking. Update firmware now
- Struts Devmode in 2025? Critical Pre-Auth Vulnerabilities in Adobe Experience Manager Forms
- ToolShell, SharePoint, and the Death of the Patch Window
- ToolShell An all-you-can-eat buffet for threat actors
- Critical Vulnerabilities Found in Tridium Niagara Framework
- The Linuxsys Cryptominer
- Asus and Adobe vulnerabilities
- AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs
- Decrement by one to rule them all AsIO3.sys driver exploitation
- Trix Shots Remote Code Execution on Aviatrix Controller
- Researcher Finds Five Zero-Days and 20+ Misconfigurations in Salesforce Cloud
- PayU Plugin Flaw Allows Account Takeover on 5000 WordPress Sites
- Multiple CVEs in Infoblox NetMRI RCE, Auth Bypass, SQLi, and File Read Vulnerabilities
- New Linux Vulnerabilities Expose Password Hashes via Core Dumps
- CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root