Vulnerability

ASUS disclosed a critical security vulnerability (CVE-2025-59373, CVSS 8.5) in its MyASUS application, specifically within the ASUS System Control…

Palo Alto Networks disclosed a reflected cross-site scripting (XSS) vulnerability (CVE-2025-0133) in its GlobalProtect gateway and portal (PAN-OS software). The…

Dartmouth reported a data breach involving its Oracle eBusiness Suite (EBS) software, where an unauthorized actor exploited a vulnerability to…

The Minnesota Department of Human Services (DHS) failed to conduct mandatory security reviews of its Supplemental Nutrition Assistance Program (SNAP)…

High-severity command injection vulnerabilities (CVE-2025-13207 and CVE-2024-24481, CVSS 8.8) have been discovered in Tenda’s N300 Wi-Fi 4G LTE…

Critical Vulnerabilities in Chainlit Framework Expose AI Systems to Data Theft and Server Compromise Researchers at Zafran Labs have uncovered…

Critical Vulnerabilities in Chainlit AI Framework Expose Sensitive Data and Enable Lateral Movement Security researchers at Zafran Security have uncovered…

A critical vulnerability in WhatsApp’s contact discovery feature was exposed by researchers at the University of Vienna, enabling attackers…

Security researchers from the University of Vienna exposed a critical vulnerability in WhatsApp’s contact discovery mechanism, enabling the enumeration…

A critical security flaw (CVE-2025-11001, CVSS 7.0) in 7-Zip is being actively exploited in the wild, allowing remote attackers…

Cybersecurity researchers at SquareX uncovered a critical **vulnerability** in **Comet**, Perplexity’s AI-powered browser, tied to a hidden **MCP API*…

SquareX researchers discovered a critical vulnerability in **Comet**, Perplexity’s AI-powered agentic browser, where hidden built-in extensions (**Comet Analytics** and…