NVIDIA
public
–
2 min read
NVIDIA disclosed and patched a high-severity vulnerability (CVE-2025-23254) in its TensorRT-LLM framework that could allow a local attacker to execute…
Apple
public
–
2 min read
A critical sandbox escape vulnerability was discovered in multiple Apple operating systems, tracked as CVE-2025-31191. The flaw resides in the…
Ruby on Rails
public
–
2 min read
On April 26, 2025, security experts disclosed a critical flaw in Ruby on Rails’ CSRF protection mechanism that effectively nullifies…
Node.js
public
–
2 min read
Security researchers discovered a critical TOCTOU vulnerability in Node.js’s CI/CD infrastructure that allowed attackers to execute malicious…
WordPress and libheif: Critical libheif Vulnerability Could Enable Remote Code Execution Through WordPress Image Uploads
public
–
3 min read
Critical libheif Vulnerability Enables Remote Code Execution in WordPress
A severe heap-buffer-overflow flaw in libheif, tracked as GHSA-x8r2-mggj-j6wr, allows authenticated…
Microsoft: New CosmosEscape Vulnerability Lets Attackers Take Over Azure Cosmos DB Instances
public
–
3 min read
Critical CosmosEscape Vulnerability in Microsoft Azure Cosmos DB Exposed Cross-Tenant Risks
Security researchers at Wiz uncovered a severe vulnerability, dubbed…
VMware, Arista and Broadcom: Arista patches maximum severity vulnerability that is already being exploited
public
–
4 min read
Arista Patches Critical VeloCloud Orchestrator Flaw Exploited in the Wild
Arista has released emergency patches for a maximum-severity (CVSS 10)…
Microsoft: Windows, "un logiciel de surveillance"? Le FBI a arrêté un jeune hacker de 19 ans grâce à un "identifiant mondial unique" de Microsoft, il permet de suivre toute l’activité en ligne d’une machine
public
–
2 min read
FBI and Microsoft Track Windows Devices Using Hidden Global Device ID, Leading to Hacker Arrest
On July 1, the FBI…
Microsoft: PoC and Technical Details Released for SharePoint Remote Code Execution Vulnerability
public
–
2 min read
Critical SharePoint RCE Vulnerability (CVE-2025-53770) Exploited in the Wild
Proof-of-concept (PoC) exploit code and technical details have been released for…
Microsoft: PoC Released for NTLM reflection bypass Vulnerability that Emanbles SYSTEM Access on Windows Server
public
–
3 min read
New PoC Exploit Bypasses Microsoft’s Patch for NTLM Reflection Vulnerability (CVE-2025-33073)
Security researchers at Synacktiv have released a proof-of-concept…
Next.js, D-Link, Apache and Netgear: Cyberattack Trends & Variations: What Our Honeypots Reveal
public
–
3 min read
Honeypot Data Reveals Persistent Cyber Threats: A Year in Exploit Trends (2025–2026)
Between May 2025 and May 2026, a…
SuperBox and ISP clients of Plume: Plume’s Security Labs uncovers ‘SuperProxy’ media player security breach that could significantly impact ISPs
public
–
2 min read
Plume Security Labs Uncovers "SuperProxy" Threat in Streaming Devices
Plume, a leader in home Wi-Fi optimization and ISP…