For nearly four months and more, YouTube was found to be vulnerable to sneaky exploits that may have leaked the email IDs of many users, 2.7 billion of them. The latest attack vector on the popular ...

REF7707 deployed FINALDRAFT malware, using Microsoft Graph API for stealthy command-and-control in a global espionage ...

Exploited CVEs increased by a fifth in 2024, according to analysis by VulnCheck, with increased transparency and improved ...

CVE-2025-21391, the zero-day Windows storage flaw, stems from the way Windows resolves file paths and follows links, Walters ...

Ivanti and Fortinet on Tuesday released patches for multiple critical- and high-severity vulnerabilities in their products.

Microsoft is correcting 57 vulnerabilities in its February Patch Tuesday, two of which are being actively exploited in the ...

Fortinet warned today that attackers are exploiting another now-patched zero-day bug in FortiOS and FortiProxy to hijack ...

Apple’s platforms may be more secure by design than others, but that doesn’t make them invulnerable to attack. That’s why ...

Over twelve thousand GFI KerioControl firewall instances are exposed to a critical remote code execution vulnerability ...

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a 2024 Outlook flaw to its catalog of known ...

Threat actors exploit SimpleHelp RMM flaws (CVE-2024-57726-28) for persistent network access, deploying Sliver and Cloudflare ...

Zyxel legacy DSL CPE products affected by exploited zero-day vulnerabilities (CVE-2024-40891 and CVE-2024-40890) will not be ...