SafeBreach researchers developed a zero-click PoC exploit that crashes unpatched Windows Servers using the Windows ...

WatchGuard warns that the critical Firebox vulnerability CVE-2025-14733 has been exploited in attacks for remote code ...

WatchGuard is in emergency patch mode after confirming that a critical remote code execution flaw in its Firebox firewalls is ...

Because it was under attack before a patch was made available by WatchGuard on December 18, this makes CVE-2025-14733 a bona ...

A fast-moving spyware campaign has forced Apple, Google and the U.S. government into an unusually coordinated response, as federal officials warn organizations to either update Chrome and other ...

A new report out today from artificial intelligence security startup Cyata Security Ltd. details a critical remote code ...

In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...

Rapidly change your password, the Microsoft security team urges as Shai-Hulud Dune Worm cloud attacks continue.

Apple's vast iPhone user base is facing an escalating wave of stealthy surveillance attacks that require no taps, clicks, or ...

In the remote maintenance software Connectwise ScreenConnect, authenticated attackers can inject malicious code. An update is available.

An unpatched zero-day vulnerability in Gogs, a popular self-hosted Git service, has enabled attackers to gain remote code execution on Internet-facing instances and compromise hundreds of servers.