A recently discovered Android vulnerability, referred to as SMS of Death, allows attackers to crash a phone's telephony process with…
Chinese state-linked hackers have exploited a zero-day vulnerability in VMware ESXi during espionage operations aimed at U.S. law firms, according…
Researcher Orange Tsai from DEVCORE has published a complete exploit chain for Microsoft Edge that successfully escapes the browser's sandbox…
The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to…
Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure…
CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following…
Security researchers have demonstrated an attack chain against Cloudflare’s Image Transformations service that bypasses SVG sanitization and Content Security Policy…
Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three…
Veeam has released security updates to address a critical authorization bypass vulnerability in Backup & Replication. This flaw, tracked as…
A critical vulnerability in EDK II's PXE network boot driver could allow unauthenticated attackers to execute malicious code before the…