Vulnerability

Critical Icinga 2 Vulnerability Allows Attackers to Obtain Valid CertificatesCritical Icinga 2 Vulnerability Allows Attackers to Obtain Valid Certificates

Critical Icinga 2 Vulnerability Allows Attackers to Obtain Valid Certificates

A critical vulnerability (CVE-2025-48057) has been discovered in Icinga 2, the widely used open-source monitoring platform. The flaw, affecting installations…

1 day ago
New Study Uncovers Multiple Vulnerabilities in WeChat and IM AppsNew Study Uncovers Multiple Vulnerabilities in WeChat and IM Apps

New Study Uncovers Multiple Vulnerabilities in WeChat and IM Apps

Instant messaging (IM) applications like WeChat have become indispensable for billions, facilitating not only communication but also payments, business, and…

1 day ago
Safari Flaw Exploited by BitM Attack to Steal User Login DataSafari Flaw Exploited by BitM Attack to Steal User Login Data

Safari Flaw Exploited by BitM Attack to Steal User Login Data

A new wave of phishing attacks, known as Fullscreen Browser-in-the-Middle (BitM) attacks, is exploiting browser features to steal user credentials…

2 days ago
Next.js Dev Server Vulnerability Leads to Developer Data ExposureNext.js Dev Server Vulnerability Leads to Developer Data Exposure

Next.js Dev Server Vulnerability Leads to Developer Data Exposure

A recently disclosed vulnerability, CVE-2025-48068, has raised concerns among developers using the popular Next.js framework. This flaw, affecting versions 13.0.0…

2 days ago
Critical Cisco IOS XE Flaw Permits Arbitrary File Upload — PoC ReleasedCritical Cisco IOS XE Flaw Permits Arbitrary File Upload — PoC Released

Critical Cisco IOS XE Flaw Permits Arbitrary File Upload — PoC Released

A critical security vulnerability, tracked as CVE-2025-20188, has been discovered in Cisco IOS XE Wireless LAN Controllers (WLCs), threatening enterprise…

2 days ago
Windows 11 File Explorer Vulnerability Enables NTLM Hash TheftWindows 11 File Explorer Vulnerability Enables NTLM Hash Theft

Windows 11 File Explorer Vulnerability Enables NTLM Hash Theft

A newly disclosed vulnerability, CVE-2025-24071, has been identified in Windows File Explorer, specifically affecting Windows 11 (23H2) and earlier versions…

2 days ago
Critical Argo CD Flaw Exposes Kubernetes Clusters to Full Resource ManipulationCritical Argo CD Flaw Exposes Kubernetes Clusters to Full Resource Manipulation

Critical Argo CD Flaw Exposes Kubernetes Clusters to Full Resource Manipulation

A critical cross-site scripting (XSS) vulnerability, officially tracked as CVE-2025-47933 and GHSA-2hj5-g64g-fp6p, has been identified in Argo CD, a widely…

2 days ago
Critical Dell PowerStore T Vulnerability Allows Full System CompromiseCritical Dell PowerStore T Vulnerability Allows Full System Compromise

Critical Dell PowerStore T Vulnerability Allows Full System Compromise

As part of its ongoing commitment to product security, Dell Technologies has released a significant update for the PowerStore T…

3 days ago
Woodpecker: Red Teaming Tool Targets AI, Kubernetes, and API VulnerabilitiesWoodpecker: Red Teaming Tool Targets AI, Kubernetes, and API Vulnerabilities

Woodpecker: Red Teaming Tool Targets AI, Kubernetes, and API Vulnerabilities

Operant AI has announced the release of Woodpecker, an open-source automated red teaming engine designed to make advanced security testing…

3 days ago
Evertz SDN Vulnerabilities Enable Unauthenticated Arbitrary Command ExecutionEvertz SDN Vulnerabilities Enable Unauthenticated Arbitrary Command Execution

Evertz SDN Vulnerabilities Enable Unauthenticated Arbitrary Command Execution

A newly disclosed critical vulnerability (CVE-2025-4009) in Evertz’s Software Defined Video Network (SDVN) product line exposes a wide range of…

3 days ago