Ransomware In Focus CYFIRMA Research and Advisory Team would like to highlight ransomware trends and insights gathered while ...

A critical remote command execution vulnerability in the Zimbra Collaboration Suite, identified as CVE-2026-73570, poses ...

CISA added CVE-2016-3081 to its KEV catalog for active exploitation of an Apache Struts flaw enabling remote code execution.

Decoding the four attack patterns published by JPCERT/CC through a conversation between 🐱 and 🛡️ Introduction: Information ...

The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on ...

A crafted OpenAPI specification with shell metacharacters in a filename gives attackers arbitrary command execution on developer machines — the latest entry in a growing class of supply-chain ...

Red Hat's Gunnar Hellekson says Lightwell is "just getting started" after fixing more than 400 open-source Java ...

IBM and Red Hat announced today they have identified and remediated more than 400 previously unknown vulnerabilities across ...

- Four identity providers disclosed 15 vulnerabilities in three days, all failing to verify credential-entity binding through default trust patterns. - Flaws enabled cross-tenant account takeover, ...

Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security ...

WatchGuard disclosed three flaws in AP devices, including two critical vulnerabilities enabling unauthenticated access and command execution.

A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including ...