Vulnerability

Critical vulnerabilities were discovered in Lenovo’s AI-powered customer support chatbot, Lena, which leverages OpenAI’s GPT-4. The flaw stemmed…

A series of critical vulnerabilities in McDonald’s digital infrastructure exposed severe security lapses across multiple systems. The flaws began…

A Use-After-Free (UAF) vulnerability (CVE-2019-5786) was discovered in Google Chrome’s FileReader API, exposing millions of users to remote code…

F5 Networks disclosed CVE-2025-54500, a critical HTTP/2 vulnerability dubbed *MadeYouReset Attack* in its BIG-IP products, enabling remote, unauthenticated attackers…

Plex has disclosed a **security vulnerability** in its **Plex Media Server (versions 1.41.7.x to 1.42.0.…

Cisco disclosed CVE-2025-20265, a critical (CVSS 10.0) remote code execution (RCE) vulnerability in its Secure Firewall Management Center (FMC)…

A critical zero-day vulnerability (CVE-2025-8088) in WinRAR’s Windows version (pre-7.13) enabled path traversal attacks, allowing threat actors to…

A critical vulnerability in **Cisco Secure Firewall Management Center (FMC) Software** (affecting versions **7.0.7 and 7.7.0*…

A critical CVE-2025-48989 vulnerability, dubbed *‘Made You Reset’*, was discovered in Apache Tomcat’s HTTP/2 implementation, enabling attackers to…

The Heartbleed vulnerability in OpenSSL (CVE-2014-0160) was a critical out-of-bounds read flaw in the Heartbeat Extension, allowing attackers to read…

CISA issued urgent warnings about two critical vulnerabilities (CVE-2025-8875 and CVE-2025-8876) in N-able N-Central, a widely used remote monitoring and…

Fortinet disclosed a critical OS command injection vulnerability (CVE-2025-25256) in its **FortiSIEM** platform, a security information and event management (SIEM)…