Airlock Digital, a global provider of application control and allowlisting solutions, today announced that it has completed ...

WordPress 6.9.5 and 7.0.2 fix wp2shell, a core REST API bug chaining route confusion and … ...

Testing for a CORS misconfiguration vulnerability comes down to one move. Send a request with an untrusted Origin header at a sensitive, authenticated endpoint. Then check whether the server reflects ...

Heads up, Microsoft users! It’s time to update your devices with the latest security updates, as Microsoft rolled out its Patch Tuesday update bundle for July 2024. This month’s update is huge, as it ...

Google has rewritten the default rate-limiting schedule behind Android’s lockscreen. Its mechanics are worth understanding if you test, forensically image, or manage fleets of Android devices. The new ...

Check Point has confirmed active attacks on a critical SmartConsole authentication bypass. The flaw sits in its Security Management and Multi-Domain Management servers. A working proof-of-concept is ...

A shim is a tiny first-stage bootloader. Its job is simple: hold a Microsoft certificate, verify the next boot component, usually GRUB 2, and hand off control. Microsoft signs most third-party shims ...

A public proof-of-concept for an unauthenticated remote code execution flaw in vBulletin landed on July 27, exposing forum administrators who skipped last month’s patch cycle. The vBulletin RCE ...

A new Linux kernel bug lets an ordinary, unprivileged user become root. It now hits Android too. Researchers have named it Bad Epoll. The Bad Epoll vulnerability carries the identifier CVE-2026-46242.

A CSRF attack forces a victim’s browser to fire off a request it never meant to send. It rides on the session cookie already stored for the target site. No password gets stolen and no code runs in the ...

The Arch User Repository lets community members adopt orphaned packages: legitimate projects abandoned by their original maintainers. That process is the entry point for this AUR supply chain attack.

A recent ruling from the US court comes in as a noteworthy setback for the NSO Group, holding it responsible for meddling with Meta’s WhatsApp. The decision arrived following NSO’s failure to provide ...