Vulnerability

A critical vulnerability in WhatsApp’s contact discovery feature was exposed by researchers at the University of Vienna, enabling attackers…

Security researchers from the University of Vienna exposed a critical vulnerability in WhatsApp’s contact discovery mechanism, enabling the enumeration…

A critical security flaw (CVE-2025-11001, CVSS 7.0) in 7-Zip is being actively exploited in the wild, allowing remote attackers…

Cybersecurity researchers at SquareX uncovered a critical **vulnerability** in **Comet**, Perplexity’s AI-powered browser, tied to a hidden **MCP API*…

SquareX researchers discovered a critical vulnerability in **Comet**, Perplexity’s AI-powered agentic browser, where hidden built-in extensions (**Comet Analytics** and…

Researchers in Austria exploited a long-standing vulnerability in **WhatsApp** to harvest personal data from over **3.5 billion users**, marking…

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about CVE-2025-58034, a critical OS command injection vulnerability…

The critical CVE-2025-64446 vulnerability in Fortinet FortiWeb WAF allows unauthenticated attackers to gain administrative access via a relative path-traversal flaw…

A critical **OS command injection vulnerability (CVE-2025-58034, CVSS 6.7)** was discovered in **Fortinet’s FortiWeb security platform**, with confirmed…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent warning about **CVE-2025-64446**, a critical **relative path traversal…

A vulnerability in DoorDash’s systems allowed threat actors to exploit an unpatched flaw in the DoorDash for Business platform,…

ASUS disclosed a critical authentication bypass vulnerability (CVE-2025-59367) in multiple DSL-series routers (DSL-AC51, DSL-N16, DSL-AC750), allowing unauthenticated remote attackers to…