Technology ❯ Cybersecurity

Vulnerabilities

Zero-Day Exploits Remote Code Execution Software Vulnerabilities Exploits Zero-Day Vulnerabilities CVE Malware Exploitation Software Security Command Injection

Galaxy S25 FE Starts Receiving December 2025 Security Update in South Korea

Samsung's patch for the Fan Edition addresses 57 vulnerabilities.

Stories older than 24h

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

Cloudflare Restores Service After Brief Global Outage Tied to React Security Mitigation

JPCERT Confirms Active Exploitation of Array Networks AG Gateways via DesktopDirect Flaw

React Patches CVSS 10 RCE in Server Components as Cloud Providers Deploy WAF Protections

Google Rolls Out Chrome 143 With 13 Security Fixes and New AI, Read Aloud Features

Microsoft Quietly Alters Windows to Expose Full .LNK Targets After Years of Real‑World Abuse

WordPress King Addons Flaw Actively Exploited to Create Admin Accounts

CISA Flags Android Zero‑Day Pair as Google Patches 107 Flaws

Apple Cuts macOS Bug Bounties, With TCC Bypass Rewards Down to $5,000

WhatsApp to End Support for Older Phones Starting December 1, 2025

Apple Podcasts Auto-Opens to Unwanted Shows, Raising Security Concerns

New ShadowV2 Botnet Used AWS Outage for Test, Fortinet Warns of Lasting IoT Risk

‘HashJack’ Exposes AI Browser Weakness as Microsoft and Perplexity Patch, Google Declines

CISA Adds Oracle Identity Manager RCE to KEV, Citing Active Exploitation and Setting Dec. 12 Deadline

Samsung’s November 2025 Security Patch Rolls Out Broadly to Galaxy Phones

Perplexity Quietly Disables Hidden Comet API After Researchers Show It Enables Local Command Execution

CISA Orders Chrome Zero-Day Fix as Google Rushes V8 Patch

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

NHS England Warns of Active Exploitation of 7‑Zip Symlink Vulnerability