Vulnerability

Discord to Make Public Server Messages Searchable on Google

Discord will make eligible messages from public channels in Discoverable Servers accessible through Google and other search engines, expanding conversations…

1 week ago

Critical GoAhead Web Server Flaw Allows Attackers to Bypass Client Certificate Authentication

A critical flaw in the GoAhead embedded web server lets revoked client certificates pass authentication checks, potentially restoring access to…

1 week ago

Hackers Abuse Online Ads to Track Starlink Users and Spy on Individuals Across 49 Countries

Advertising infrastructure is increasingly being repurposed as a surveillance channel that can profile internet users and track their movements across…

1 week ago

HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges

HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions gain elevated…

1 week ago

Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics

Apple has released updates for iOS 18.7.11 and iPadOS 18.7.11 to address three security vulnerabilities, including a CoreGraphics flaw connected…

1 week ago

KeePassXC 2.8.0 Released to Fix Multiple Security Vulnerabilities Affecting Password Manager

KeePassXC has released version 2.8.0 to address multiple security vulnerabilities related to database imports, browser integration, SSH key handling, and…

2 weeks ago

Apache Camel Vulnerabilities Allow Remote Code Execution, Authentication Bypass, and Data Theft

Apache Camel’s security advisories document critical and high-severity vulnerabilities that could allow for remote code execution, authentication bypass, credential exposure,…

2 weeks ago

Microsoft Authenticator Flaw Allows Android Apps With Zero Permissions to Steal Authentication Tokens

A high-severity vulnerability in Microsoft Authenticator for Android could let a malicious app, without any Android permissions, impersonate trusted Microsoft…

2 weeks ago

Cloudflare Adds New WAF Rules to Detect Attacks Targeting CVE-2026-111497

Cloudflare announced an emergency release of its Web Application Firewall (WAF) on October 25, 2026. This update introduces two detection…

2 weeks ago

Hacker Demonstrates PHP Remote Code Execution in StealMyBitcoin Challenge, Shares Exploit

A security researcher has successfully demonstrated a PHP remote code execution (RCE) exploit against the Steal My Bitcoin challenge. This…

2 weeks ago