Vulnerability

A critical remote code execution vulnerability in React.js has been identified. React.js is a JavaScript library for building…

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued an “act now” critical alert regarding…

DragonForce Ransomware Group Abuses Microsoft Teams to Conceal Malicious Traffic in US Firm Breach Cybercriminals tied to the DragonForce ransomware…

Critical React2Shell Exploit (CVE-2025-55182) Drives Large-Scale Attack Campaign A newly disclosed critical vulnerability, React2Shell (CVE-2025-55182), enables pre-authentication remote code execution…

Sophisticated FreePBX Attack Campaign Deploys Persistent "EncystPHP" Webshell A financially motivated hacker group, INJ3CTOR3, has launched a targeted…

Fortinet Disables FortiCloud SSO After Zero-Day Exploitation Fortinet temporarily disabled its FortiCloud Single Sign-On (SSO) service following the active exploitation…

Critical Backdoor in LA-Studio Element Kit for Elementor Exposes 20,000+ WordPress Sites A severe backdoor vulnerability (CVE-2026-0920, CVSS 9.…

Critical Backdoor in LA-Studio Element Kit for Elementor Exposes 20,000+ WordPress Sites A severe backdoor vulnerability (CVE-2026-0920) has been…

Sicarii Ransomware: A Geopolitically Motivated Threat Emerges with Israeli Affiliations In December 2025, a new ransomware-as-a-service (RaaS) operation named Sicarii…

Critical Vulnerabilities in Chainlit AI Framework Expose Enterprises to Data Leaks and Account Takeovers Cybersecurity firm Zafran has identified two…

A security flaw in the widely-used Apache Tika XML document extraction utility, originally made public last summer, is wider in…

A critical security vulnerability has been discovered in the Apache bRPC framework that could allow remote attackers to crash servers…