Technology ❯ Software

Vulnerabilities

Zero-Day Exploits CVE Remote Code Execution Exploits Exploitation Exploitation Techniques CVE Identifiers Kernel Vulnerabilities Security Flaws Security Updates

U.S. and Allies Attribute Long‑Running Zimbra Mail Theft to Russian Group Laundry Bear

Agencies say the campaign is a state‑backed espionage effort, with patches unable to undo credentials and app passwords already taken

Ukraine's CERT Says UAC-0099 Hid Malware in Fake Notepad++ Plugin

TrustedVolumes Attacker Returns 1,122 ETH and Keeps Similar Amount as Bounty

Hide My Email Flaw Lets Attackers Unmask Users’ Real Addresses

Google Publishes June Android Security Bulletins With 122 Fixes and a 0‑Day

Torvalds Says Linux Security List Is ‘Almost Entirely Unmanageable’ as AI-Generated Bug Reports Flood In

Exaforce Raises $125 Million Series B for Real-Time AI Security Platform

US, UK Warn of ‘Firestarter’ Backdoor on Cisco Firewalls That Survives Patches

Microsoft Says Windows 11 Defender Is Enough for Most Users as April Zero‑Day Reports Temper Confidence

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Android April Security Fixes Land as Samsung Rolls Out 47-Patch Galaxy Update

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Magento ‘PolyShell’ Exploited at Scale as New WebRTC Skimmer Bypasses Site Defenses

LiteLLM Supply-Chain Attack Sees Backdoored PyPI Releases Pulled as Users Urged to Rotate Keys

Pakistan CERT Orders Tighter Supply-Chain Defenses for Critical Infrastructure

DarkSword iPhone Exploit Leaks on GitHub, Threatens Unpatched Devices

CISA Flags Cisco Firewall Zero-Day Exploited by Interlock, Sets March 22 Patch Deadline

CISA Adds Three Actively Exploited Flaws to KEV, Sets Fast Federal Patching Deadlines

Dell Patches RecoverPoint Zero-Day Exploited Since 2024 by Suspected China Group