CISA says threat actors are now actively exploiting a high-severity Windows SMB privilege escalation vulnerability that can ...

CISA adds high-severity flaw to KEV list, urges swift updating Uncle Sam's cyber wardens have warned that a high-severity ...

CISA warned that recently disclosed vulnerabilities in Windows SMB Client and Kentico Xperience CMS have been exploited in ...

Fortinet and Ivanti have announced their October 2025 Patch Tuesday updates, which fix serious vulnerabilities across their products.

US cybersecurity agency CISA warns of active exploitation of a vulnerability in the Windows SMB protocol. Attackers can use ...

Google LLC’s Mandiant has published details of a critical privilege escalation vulnerability found in Microsoft Corp.’s Azure Kubernetes service that, though patched by Microsoft, could have allowed ...

Researchers found evidence that the CVE-2025-29824 privilege escalation flaw patched by Microsoft in April was known and used by the Play ransomware gang in addition to a group that Microsoft tracked ...

KrustyLoader, first detailed by Synacktiv in January 2024, is a Rust-based loader previously put to use by a China-nexus ...

Oracle patches a high-severity EBS flaw that could let attackers bypass authentication and access sensitive enterprise data.

A design flaw in the WordPress permission system used by plugins and a file deletion vulnerability in a very popular eCommerce plugin called WooCommerce could allow attackers to gain full control over ...