Every report filed under this tag.
Google patches CVE-2026-58704, a high-severity Pixel cellular modem vulnerability that requires no user interaction and shows signs of limited targeted exploitation.
Threat actors are actively exploiting a critical vulnerability in the Wholesale Lead Capture Plugin for WooCommerce, allowing unauthenticated attackers to upload malicious PHP files and potentially take complete control of vulnerable WordPress websites.
Security researchers have detected active exploitation attempts targeting a critical authentication-bypass vulnerability in WSO2 API Manager, with attackers sending forged JSON Web Tokens (JWTs) containing administrator privileges.
Nintendo has patched a high-severity vulnerability in the original Nintendo Switch that could allow a nearby attacker to execute unauthorized code or access information stored on the console.
China-linked threat actors have been observed chaining multiple vulnerabilities in Google Chrome and Microsoft Windows as part of sophisticated cyber-espionage campaigns targeting non-governmental organizations and other high-value organizations.
Security researchers have disclosed a high-severity vulnerability in Telegram Desktop that could allow malicious JavaScript hidden inside a seemingly normal chat message to execute when a conversation is exported as HTML and opened in a web browser.
A newly disclosed vulnerability in Plesk Backup Manager could allow a low-privileged customer to escalate privileges and obtain full root access to a vulnerable Linux server.
Fintech giant Revolut has confirmed a data-security incident in which an unauthorized party obtained sensitive customer information after submitting fraudulent requests that appeared to come from a legitimate government agency.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog.
GitLab has patched a maximum-severity path traversal vulnerability that can allow unauthenticated attackers to read arbitrary files from vulnerable GitLab servers.
Attackers have been actively exploiting vulnerabilities in self-hosted JFrog Artifactory deployments to obtain administrator privileges, create persistent accounts, execute commands and install backdoors, raising serious concerns for organizations that rely on Artifactory as a central component of their software supply chains.
A China-linked threat actor tracked as UNC3569 has exploited a newly disclosed vulnerability in Sogou Input Method for Windows to compromise systems and deploy the GRAYRABBIT backdoor, according to research from Gen Threat Labs.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.