Every report filed under this tag.
SAP has released its September 2026 security updates, addressing multiple vulnerabilities across its enterprise software portfolio, including a maximum-severity flaw in the SAP Kernel that could allow unauthenticated attackers to remotely execute operating-system commands.
A security researcher has released a new proof-of-concept (PoC) demonstrating that Microsoft's recent fix for a Microsoft Defender vulnerability known as **ShieldBreak** can reportedly be bypassed.
Microsoft has delivered the largest security update in the history of its Patch Tuesday program, addressing 974 vulnerabilities across Windows, Office, SQL Server, Developer Tools, Exchange, SharePoint, Azure and other products.
A maximum-severity vulnerability in **N-able N-central**, a remote monitoring and management (RMM) platform widely used by managed service providers (MSPs) and IT teams, is now being exploited in the wild.
Security researchers have demonstrated a highly dangerous zero-click attack against WeChat that can take over user accounts through an incoming call—without requiring the victim to answer the call, tap a button, or interact with their device.
Cybersecurity researchers have uncovered an actively exploited zero-day vulnerability affecting Magento Open Source and Adobe Commerce, allowing unauthenticated attackers to execute malicious code and install persistent backdoors on e-commerce servers.
JetBrains has disclosed a security incident in its Cadence cloud service after attackers exploited a critical, unpatched TeamCity vulnerability to gain access to the environment and compromise sensitive credentials, including AWS IAM credentials.
Trezor has disclosed that an additional 67,000 U.S. customers were affected by a data breach at its third-party shipping provider, ShipMonk, significantly expanding the scope of an incident first reported in August.
Broadcom has released security updates for VMware Workstation and Fusion to address two vulnerabilities that could allow attackers with administrative privileges inside a virtual machine to execute code on the underlying host system.
Security researchers have demonstrated a ChatGPT attack technique in which a malicious instruction planted inside a conversation could silently turn the AI assistant into a data-exfiltration tool.
Threat actors are actively exploiting two newly disclosed PaperCut vulnerabilities to gain unauthorized access, execute commands, create privileged accounts, and steal credentials from educational organizations across the United States and Europe.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.