Vulnerability

Cybersecurity researchers at Oligo Security discovered a series of critical **Remote Code Execution (RCE) vulnerabilities** in Meta’s AI inference…

CISA issued an emergency directive ordering US federal agencies to urgently patch two actively exploited zero-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362)…

In October, GlobalLogic fell victim to a cyberattack where threat actors exploited a zero-day vulnerability in Oracle E-Business Suite. The…

GitLab disclosed nine vulnerabilities across its Community (CE) and Enterprise (EE) editions, with CVE-2025-6945 being the most critical—a prompt-injection…

A critical Remote Code Execution (RCE) vulnerability (CVE pending) was discovered in the widely used JavaScript library `expr-eval` (versions <…

The incident involves a 403 Forbidden error on an IBM web page, indicating unauthorized access or a misconfigured security restriction.…

Elastic disclosed a critical vulnerability (CVE-2025-37735) in Elastic Defend for Windows, stemming from improper file permission preservation in its SYSTEM-privileged…

Security researchers at Palo Alto Networks uncovered LANDFALL, a sophisticated Android spyware campaign exploiting a zero-day vulnerability (CVE-2025-21042, CVSS 8.…

Microsoft’s November 2025 Patch Tuesday addressed CVE-2025-62215, an actively exploited Windows Kernel race condition vulnerability enabling local privilege escalation…

Microsoft has addressed a critical security flaw that has been exploited by threat actors since 2017 through its recent Patch…

A zero-day exploit in Samsung Knox’s DEFEX module was discovered, allowing attackers to bypass Message Guard’s zero-click attack…

Critical Vulnerability in Motors WordPress Theme Exposes Sites to Full Takeover A severe security flaw in the Motors WordPress theme…