Two critical Next.js flaws enable unauthenticated remote code execution on Windows-hosted apps using the Image Optimization ...
Iran-linked Tortoiseshell expands espionage with a new backdoor and reverse SSH tunneling, targeting Middle Eastern, and ...
Microsoft SharePoint flaws can be chained to bypass authentication and remotely take control of vulnerable servers without a ...
OpenSSL has issued a fresh security advisory disclosing seven vulnerabilities across its cryptographic library, ranging from ...
Mirage2FA Phishing Kit Bypasses MFA to Hijack Microsoft 365 Sessions, Targeting 3,500+ Organizations
A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft ...
TranslatePress WordPress plugin flaw lets unauthenticated attackers hijack admin accounts and compromise websites.
Twenty-four malicious npm packages have been used to turn trusted package mirrors into staging points for ClickFix phishing ...
Ubiquiti has patched 21 critical-severity vulnerabilities spanning nearly its entire UniFi product line, warning that attackers with only network access could chain the flaws.
Google has released Chrome 152 for Windows, macOS, and Linux with 327 fixes and improvements, including 10 critical vulnerabilities.
Git repositories leak credentials and sensitive data, giving attackers access to cloud accounts and business systems.
Thirty-five years later, that hobby sits under the internet, the public cloud, Android, and every system on the TOP500 ...
Iran-linked MuddyWater uses Deno to hide Dindoor backdoor activity, targeting U.S. software, banking, and Canadian organizations.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results