Vulnerability

Zero-Day Cyber Espionage Campaign Targets Microsoft SharePoint Servers A large-scale cyber espionage operation exploiting a previously unknown vulnerability in Microsoft’…

Researchers have observed multiple exploitation attempts for the CVE-2025-48927 vulnerability in the TeleMessage SGNL app, which allows retrieving usernames, passwords,…

CrushFTP is warning about a zero-day vulnerability (CVE-2025-54309) that allows attackers to gain administrative access via the web interface on…

Two proof-of-concept (PoC) exploits made public late last week for a critical SQL command injection vulnerability in Fortinet’s FortiWeb…

Hackers exploited a critical vulnerability in Wing FTP Server, a widely used file transfer solution, just one day after the…

A researcher discovered a bug in the Meta AI chatbot that allowed unauthorized access to private user conversations. The bug…

A critical vulnerability (CVE-2025-20337) in Cisco's Identity Services Engine (ISE) allows an unauthenticated attacker to store malicious files,…

A critical vulnerability, dubbed 'CitrixBleed 2' and tracked as CVE-2025-5777, was actively exploited nearly two weeks before proof-of-concept…

Ford is recalling 694,271 Bronco Sport and Escape SUVs due to a faulty fuel injector that can leak, posing…

A critical vulnerability in Git CLI enables arbitrary file writes on Linux and macOS systems, allowing attackers to achieve remote…

A newly disclosed flaw in Apache Tomcat’s Coyote engine, tracked as CVE-2025-53506, has been identified. The vulnerability allows a…

Critical security vulnerabilities in Gigabyte UEFI firmware allow attackers to execute arbitrary code in System Management Mode (SMM), bypassing Secure…