Technology ❯ Cybersecurity

Vulnerabilities

Zero-Day Exploits Remote Code Execution Software Vulnerabilities Exploits Zero-Day Vulnerabilities CVE Malware Exploitation Software Security Command Injection

CISA Flags Active Chrome Zero-Day as Google Rushes Emergency Patch

CISA has listed the exploited V8 flaw in its KEV catalog with a December 10 deadline for federal agencies.

Stories older than 24h

CISA Orders 7-Day Fix for New FortiWeb Zero-Day Exploited in the Wild

NHS England Warns of Active Exploitation of 7‑Zip Symlink Vulnerability

Fortinet Confirms Second FortiWeb Flaw Under Active Attack as CISA Demands Rapid Fixes

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

ASUS Patches Critical Router Flaw, Urges Immediate Update on Three DSL Models

CISA Adds WatchGuard Firewall Remote Code Execution Flaw to KEV, Sets Dec. 3 Patching Deadline

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor

Microsoft’s November Patch Tuesday Fixes 63 Flaws, Including Actively Exploited Windows Kernel Zero-Day

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

CISA Orders Patch of Exploited Samsung Zero‑Day Used to Deliver LANDFALL Spyware

UK Opens Cybersecurity Probe Into Yutong Buses Over Potential Remote Shutoff Risk

Windows 10 Users Face Deadline as ESU Enrollment Stumbles Before Patch Tuesday

Landfall Spyware Exploited Samsung Zero-Day to Hack Galaxy Phones for Months

Cisco Patches Critical UCCX Flaws as New Firewall Attack Variant Emerges

Balancer Blames $116.6 Million DeFi Heist on Rounding Bug in Swap Math

SonicWall Says State Actor Behind September Breach, Limited to Cloud Backups

Google’s $32 Billion Wiz Deal Wins U.S. Antitrust Sign-Off

Apple Disables Sourcemaps After Web App Store Front-End Code Posted to GitHub

CISA Adds Gladinet and CWP Flaws to KEV, Setting Nov. 25 Federal Remediation Deadline