Attackers could exploit vulnerable deployments to intercept and tamper with communications in certain configurations. The post ConnectWise Patches...

The vulnerability impacts multiple Rust tar parsers, allowing attackers to smuggle additional archive entries. The post TARmageddon Flaw in Popular...

CVE-2025-59287 allows a remote, unauthenticated attacker to execute arbitrary code and a PoC exploit is available. The post Critical Windows Server...

Hackers exploit critical XWiki flaw CVE-2025-24893 to hijack corporate servers for cryptomining, with active attacks confirmed by VulnCheck...

Hackers exploit critical XWiki flaw CVE-2025-24893 to hijack corporate servers for cryptomining, with active attacks confirmed by VulnCheck...

ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive...

ConnectWise released a security update to address vulnerabilities, one of them with critical severity, in Automate product that could expose sensitive...

The identities of alleged core members of the Lumma Stealer group were exposed in an underground doxxing campaign. The post Lumma Stealer Activity...

The identities of alleged core members of the Lumma Stealer group were exposed in an underground doxxing campaign. The post Lumma Stealer Activity...

A new Ubuntu kernel flaw lets local attackers gain root access through patch inconsistencies. The post Ubuntu Kernel Flaw Opens the Door to Privilege...