Vulnerability

Critical PyTorch Vulnerability (CVE-2026-24747) Enables Arbitrary Code Execution via Malicious Model Files A severe vulnerability in PyTorch’s checkpoint loading…

SmarterMail Patches Critical RCE Flaw (CVE-2025-52691) in Business Email Servers SmarterTools has released a patch for CVE-2025-52691, a maximum-severity remote…

Critical Privilege Escalation Flaw in Apache StreamPipes Patched Apache has released a security patch for a critical privilege escalation vulnerability…

Mustang Panda Deploys Undocumented Kernel-Mode Rootkit in Targeted Cyber Espionage Campaign In mid-2025, the Chinese state-linked hacking group Mustang Panda…

CISA Issues Emergency Directive for MongoBleed Vulnerability in MongoDB The Cybersecurity and Infrastructure Security Agency (CISA) has mandated U.S.…

Critical Windows Vulnerability (CVE-2025-50165) Exploits JPG Encoding Flaw for Remote Code Execution Researchers at ESET conducted a deep-dive analysis of…

MongoBleed Vulnerability Exposes Sensitive Data in 87,000 MongoDB Instances A high-severity vulnerability, MongoBleed (CVE-2025-14847), allows attackers to leak sensitive…

Marbled Dust Exploits Zero-Day in Output Messenger for Cyber Espionage Targeting Kurdish Military A Türkiye-linked threat actor, tracked as Marbled…

Fortinet Warns of Active Exploitation of 5-Year-Old FortiOS SSL VPN Flaw Fortinet has confirmed active exploitation of CVE-2020-12812, a five-year-old…

New LLM Attack "TokenBreaker" Bypasses Protections with Single-Character Tweaks Researchers from cybersecurity firm HiddenLayer have uncovered a novel…

Critical ‘LangGrinch’ Vulnerability in LangChain-Core Exposes AI Agent Secrets A recently disclosed high-severity vulnerability, dubbed LangGrinch, affects langchain-core—a foundational…

Critical Net-SNMP Vulnerability (CVE-2025-68615) Enables RCE and DoS Attacks On December 24, 2025, a critical vulnerability (CVE-2025-68615) was disclosed in…