Technology ❯ Cybersecurity

Vulnerabilities

Zero-Day Exploits Remote Code Execution Software Vulnerabilities Exploits Zero-Day Vulnerabilities CVE Malware Exploitation Command Injection Software Security

Apple and Google Ship Emergency Patches for Linked WebKit Zero-Days Used in Targeted Attacks

The shared CVE across Chrome and WebKit suggests a highly targeted spyware operation.

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

Stories older than 24h

Microsoft Puts All Online Services 'In Scope by Default' for Bug Bounties

CISA Adds Actively Exploited GeoServer XXE to KEV, Orders Federal Patching

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

React Issues New RSC Patches as React2Shell Attacks Escalate and EtherRAT Surfaces

Google Ships Emergency Chrome Patch for Eighth 2025 Zero-Day Exploit

Fortinet, Ivanti and SAP Push Critical Fixes as FortiCloud SSO Bypass Comes to Light

CISA Adds Actively Exploited WinRAR and Windows Flaws to KEV, Sets Dec. 30 Deadline

Warnings Intensify Over Chinese-Made Inverters on U.S. Grid as GOP Seeks Import Blocks

Microsoft’s December Patch Tuesday Fixes 57 Flaws, Including Exploited Windows Zero-Day

Petco Says Misconfigured App Exposed SSNs, Driver’s Licenses and Financial Data

React2Shell Exploited in the Wild as China-Linked Groups Target Unpatched React Server Components

UK Cyber Agency: Prompt Injection Is a Persistent LLM Weakness, Not a Fixable Bug

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

Cloudflare Restores Service After Brief Global Outage Tied to React Security Mitigation

JPCERT Confirms Active Exploitation of Array Networks AG Gateways via DesktopDirect Flaw

React Patches CVSS 10 RCE in Server Components as Cloud Providers Deploy WAF Protections

Google Rolls Out Chrome 143 With 13 Security Fixes and New AI, Read Aloud Features

Microsoft Quietly Alters Windows to Expose Full .LNK Targets After Years of Real‑World Abuse