Vulnerability

A critical Remote Code Execution (RCE) vulnerability (CVE pending) was discovered in the widely used JavaScript library `expr-eval` (versions <…

The incident involves a 403 Forbidden error on an IBM web page, indicating unauthorized access or a misconfigured security restriction.…

Elastic disclosed a critical vulnerability (CVE-2025-37735) in Elastic Defend for Windows, stemming from improper file permission preservation in its SYSTEM-privileged…

Security researchers at Palo Alto Networks uncovered LANDFALL, a sophisticated Android spyware campaign exploiting a zero-day vulnerability (CVE-2025-21042, CVSS 8.…

Microsoft’s November 2025 Patch Tuesday addressed CVE-2025-62215, an actively exploited Windows Kernel race condition vulnerability enabling local privilege escalation…

Microsoft has addressed a critical security flaw that has been exploited by threat actors since 2017 through its recent Patch…

A zero-day exploit in Samsung Knox’s DEFEX module was discovered, allowing attackers to bypass Message Guard’s zero-click attack…

Critical Vulnerability in Motors WordPress Theme Exposes Sites to Full Takeover A severe security flaw in the Motors WordPress theme…

Threat Actors Weaponize QEMU as Covert Backdoor for Ransomware and Credential Theft Cybercriminals are increasingly abusing QEMU, a legitimate open-source…

Payouts King Ransomware Abuses QEMU for Stealthy Attacks The Payouts King ransomware operation is leveraging the QEMU emulator as a…

Zero-Day Exploit in Adobe Reader Targets Russian Oil and Gas Sector Security researchers have uncovered an active zero-day vulnerability in…

DarkSword: Advanced iOS Exploit Kit Targets iPhones in Four Countries Since November 2025, a sophisticated iOS exploit kit named DarkSword…