SafeBreach researchers developed a zero-click PoC exploit that crashes unpatched Windows Servers using the Windows ...

Static AES keys are enabling attackers to decrypt access tokens and reach remote code execution, triggering urgent patch ...

An unauthenticated user can execute the attack, and there’s no mitigation, just a hotfix that should be applied immediately.

MongoDB has warned IT admins to immediately patch a high-severity vulnerability that can be exploited in remote code ...

The vulnerability, tracked as CVE-2025-68664 and dubbed “LangGrinch,” has a Common Vulnerability Scoring System score of 9.3.

A new report out today from artificial intelligence security startup Cyata Security Ltd. details a critical remote code ...

Over the past week, enterprise security teams observed a combination of covert malware communication attempts and aggressive probing of publicly exposed infrastructure. These incidents, detected ...

An unpatched zero-day vulnerability in Gogs, a popular self-hosted Git service, has enabled attackers to gain remote code execution on Internet-facing instances and compromise hundreds of servers.

In the remote maintenance software Connectwise ScreenConnect, authenticated attackers can inject malicious code. An update is ...

Because it was under attack before a patch was made available by WatchGuard on December 18, this makes CVE-2025-14733 a bona ...

With attacks on the critical firewall vulnerability, WatchGuard joins a list of edge device vendors whose products have been ...