Security researchers have recently demonstrated a significantly improved exploit for the Retbleed CPU vulnerability, highlighting the ongoing risks posed by…
A recently identified command injection vulnerability, CVE-2025-53652, in the Jenkins Git Parameter plugin puts approximately 15,000 Jenkins servers at risk of…
A critical vulnerability, CVE-2025-47812, in Wing FTP Server is under active exploitation, allowing unauthenticated remote code execution with root or SYSTEM…
Ivanti has recently addressed three high-severity vulnerabilities in its Endpoint Manager (EPM) software. These flaws, if exploited, could allow attackers…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about an actively exploited path traversal vulnerability in…
It's time for another Patch Tuesday! This month, Microsoft has released patches for 137 flaws, including 14 critical bugs and…
The Sudo utility has been identified as having two local privilege escalation vulnerabilities, CVE-2025-32462 and CVE-2025-32463. To mitigate these risks, it is recommended that…
The Cybersecurity and Infrastructure Security Agency (CISA) has recently added CVE-2023-33538, a high-severity vulnerability affecting certain TP-Link wireless routers, to its…
Google has recently released an out-of-band security patch to address a high-severity zero-day vulnerability in its Chrome browser. This vulnerability,…
Mozilla released emergency Firefox patches to combat two critical zero days discovered during the hacking contest Pwn2own. CVE-2025-4918, credited to…