WhatsApp (Meta)
public
–
3 min read
WhatsApp disclosed a zero-click vulnerability (CVE-2025-55177) in its iOS and macOS apps, exploited in targeted zero-day attacks alongside an Apple…
Sangoma Technologies Corporation
public
–
3 min read
The Sangoma FreePBX Security Team disclosed an actively exploited zero-day vulnerability in FreePBX systems with exposed Administrator Control Panels (ACP)…
Citrix (Cloud Software Group)
public
–
4 min read
Citrix disclosed a critical zero-day vulnerability (CVE-2025-7775) in its NetScaler ADC and NetScaler Gateway products, actively exploited in the wild…
TP-Link: TP-Link Vulnerability Allows Authentication Bypass Via Password Recovery Feature
public
–
2 min read
Critical Authentication Bypass Flaw in TP-Link VIGI Cameras Exposes Surveillance Systems to Unauthorized Access
A high-severity authentication vulnerability (CVE-2026-0629) has…
N-able
public
–
3 min read
The article highlights critical vulnerabilities in N-able’s N-central, an RMM (Remote Monitoring and Management) tool used by MSPs (Managed…
Amazon Web Services (AWS)
public
–
4 min read
AWS’s Trusted Advisor tool, designed to alert customers if their S3 storage buckets are publicly exposed, was found to…
Apple
public
–
3 min read
Apple disclosed a critical zero-day vulnerability (CVE-2025-43300) in its Image I/O framework, affecting iPhones, iPads, and Macs. The flaw,…
Bitwarden
public
–
4 min read
Bitwarden, a widely used password manager with millions of users, was found vulnerable to unpatched clickjacking flaws that allow attackers…
Lenovo
public
–
2 min read
Critical vulnerabilities were discovered in Lenovo’s AI-powered customer support chatbot, Lena, which leverages OpenAI’s GPT-4. The flaw stemmed…
McDonald’s
public
–
4 min read
A series of critical vulnerabilities in McDonald’s digital infrastructure exposed severe security lapses across multiple systems. The flaws began…
public
–
7 min read
A Use-After-Free (UAF) vulnerability (CVE-2019-5786) was discovered in Google Chrome’s FileReader API, exposing millions of users to remote code…
F5 Networks
public
–
4 min read
F5 Networks disclosed CVE-2025-54500, a critical HTTP/2 vulnerability dubbed *MadeYouReset Attack* in its BIG-IP products, enabling remote, unauthenticated attackers…