Vulnerability

Synology Patches Critical Vulnerabilities in SSL VPN Client Synology has released a security update addressing two significant vulnerabilities in its…

Critical GitLab SSRF Vulnerability Under Active Exploitation, CISA Warns The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2021-39935, a…

Hackers are targeting the second of two four-year-old vulnerabilities in the open-source supervisory control and data acquisition platform. The US…

The Maine Office of the Attorney General reported that CSX Transportation, Inc. experienced a data breach involving a vulnerability in…

Windows Privilege Escalation Flaw CVE-2020-17103 Remains Unpatched, Exploit Released A security researcher has released MiniPlasma, an exploit targeting CVE-2020-17103 a…

Hackers Revive Five-Year-Old ShowDoc Vulnerability in Global Attacks A critical security flaw in ShowDoc, a PHP-based document collaboration tool popular…

The California Office of the Attorney General reported a data breach involving The Chronicle of Higher Education, Inc. on July…

Nintendo Confirms Data Breach via Third-Party Service, Employee Information Exposed Nintendo has disclosed a data breach involving employee information after…

Chinese National Extradited to U.S. for Cyber Intrusions Linked to HAFNIUM and COVID-19 Research Theft A 34-year-old Chinese national,…

Pwn2Own Berlin 2026 Highlights Major Exploits as Zero-Days and Breaches Surge The second and third days of Pwn2Own Berlin 2026…

Critical ShowDoc Vulnerability Exploited in Active Attacks Threat actors are actively exploiting a severe remote code execution (RCE) vulnerability in…

The open-source forum software vBulletin was exposed to two critical vulnerabilities (CVE-2025-48827 and CVE-2025-48828), enabling remote, unauthenticated code execution (RCE)…