A novel attack technique named MadeYouReset has been discovered, targeting multiple implementations of the HTTP/2 protocol. This flaw, sitting at a comfortable…
August's Patch Tuesday has arrived! This month, Microsoft has released patches for 107 flaws, including 13 critical bugs and one…
A novel attack technique dubbed "Ghost Calls" has emerged, exploiting web conferencing platforms like Zoom, Microsoft Teams, and Google Meet…
Security researchers have recently demonstrated a significantly improved exploit for the Retbleed CPU vulnerability, highlighting the ongoing risks posed by…
A recently identified command injection vulnerability, CVE-2025-53652, in the Jenkins Git Parameter plugin puts approximately 15,000 Jenkins servers at risk of…
A critical vulnerability, CVE-2025-47812, in Wing FTP Server is under active exploitation, allowing unauthenticated remote code execution with root or SYSTEM…
Ivanti has recently addressed three high-severity vulnerabilities in its Endpoint Manager (EPM) software. These flaws, if exploited, could allow attackers…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about an actively exploited path traversal vulnerability in…
It's time for another Patch Tuesday! This month, Microsoft has released patches for 137 flaws, including 14 critical bugs and…
The Sudo utility has been identified as having two local privilege escalation vulnerabilities, CVE-2025-32462 and CVE-2025-32463. To mitigate these risks, it is recommended that…