Vulnerability

In the first half of 2025, Ivanti became a primary target of UNC5221, a suspected China-linked state-sponsored threat group exploiting…

Perplexity’s AI-powered browser Comet was exposed to HashJack, a critical indirect prompt injection vulnerability exploiting URL fragments (after the…

OpenAI fixed a critical vulnerability named ShadowLeak in its Deep Research agent, a tool integrated with services like Gmail and…

The incident involves a 403 Forbidden error, indicating unauthorized or restricted access to an IBM web resource. While the error…

A critical Remote Code Execution (RCE) vulnerability (CVSS 8.2) was discovered in Imunify360 AV (AI-Bolit) before v32.7.4.…

Security researchers exploited cross-modal vulnerabilities in OpenAI’s Sora 2 a cutting-edge multimodal AI model for video generation to extract…

A series of security audits spanning from 2014 to recent years exposed severe cybersecurity vulnerabilities at the Louvre Museum, France’…

The LANDFALL spyware campaign exploited a zero-day vulnerability (CVE-2025-21042) in Samsung’s Android image processing library, targeting Galaxy devices (S22,…

The CVE-2025-41244 vulnerability in VMware Aria Operations and VMware Tools (with SDMP enabled) was exploited by the Chinese state-sponsored group…

GitHub’s Copilot Chat, an AI-powered coding assistant, was found vulnerable to a critical flaw named CamoLeak (CVSS 9.6)…

WatchGuard disclosed CVE-2025-9242, a critical remote code execution (RCE) vulnerability in its Firebox firewalls due to an out-of-bounds write flaw…

Suspected state-sponsored attackers exploited a zero-day command injection vulnerability (CVE-2025-59689) in Libraesva Email Security Gateway (ESG), versions 4.5 to…