Technology ❯ Cybersecurity ❯ Incident Response

Vulnerability Management

Patch Management Threat Detection Security Updates Security Patches Firmware Updates Qualys Solutions Container Security Citrix NetScaler Hotfix Deployment CVE-2025-11953

3 ARTICLES

yesterday

Unpatched Gogs Zero-Day Lets Low-Privilege Users Execute Code on Exposed Servers

Exploit code was published on May 28 and many default-configured, internet-facing instances remain exposed, raising immediate risk to hosted repositories and credentials.

3 ARTICLES

last wk.

CPUID Confirms Brief Website Hijack That Served Malware via CPU-Z and HWMonitor Links

3 ARTICLES

last mo.

Hackers Exploit Critical Ninja Forms File Uploads Flaw to Seize WordPress Sites

9 ARTICLES

last mo.

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

5 ARTICLES

2mo ago

Citrix Patches Critical NetScaler Memory-Leak Flaw and Session Mixup Bug

3 ARTICLES

2mo ago

Attackers Exploit Critical Langflow RCE Within 20 Hours of Disclosure

3 ARTICLES

2mo ago

Qualys Discloses 'CrackArmor' Flaws in Linux AppArmor Exposing Root and Container Escapes

3 ARTICLES

3mo ago

New Analysis Disputes Claims of Pre-Disclosure Telnet Blocking

6 ARTICLES

3mo ago

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

5 ARTICLES

3mo ago

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

3 ARTICLES

3mo ago

CISA Says VMware ESXi Escape Flaw Now Used in Ransomware Attacks

5 ARTICLES

3mo ago

Public Exploits Detail n8n Sandbox Escape That Lets Workflow Users Take Over Servers

5 ARTICLES

3mo ago

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

4 ARTICLES

4mo ago

OpenSSL Patches 12 Flaws Found by AISLE in Coordinated January Update

3 ARTICLES

4mo ago

Active Attacks Target Critical Vulnerability in Legacy D-Link DSL Routers

Vulnerability Management

Unpatched Gogs Zero-Day Lets Low-Privilege Users Execute Code on Exposed Servers

Nine-Year Linux Kernel Flaw Lets Local Users Steal SSH Keys and Gain Root

Google Patches Critical Android Zero-Click Flaw in Wireless ADB

Google Patches Antigravity Flaw That Let Prompt Injection Break the Sandbox

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

CPUID Confirms Brief Website Hijack That Served Malware via CPU-Z and HWMonitor Links

Hackers Exploit Critical Ninja Forms File Uploads Flaw to Seize WordPress Sites

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Citrix Patches Critical NetScaler Memory-Leak Flaw and Session Mixup Bug

Never miss stories about

Vulnerability Management

Attackers Exploit Critical Langflow RCE Within 20 Hours of Disclosure

Qualys Discloses 'CrackArmor' Flaws in Linux AppArmor Exposing Root and Container Escapes

New Analysis Disputes Claims of Pre-Disclosure Telnet Blocking

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

CISA Says VMware ESXi Escape Flaw Now Used in Ransomware Attacks

Public Exploits Detail n8n Sandbox Escape That Lets Workflow Users Take Over Servers

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

OpenSSL Patches 12 Flaws Found by AISLE in Coordinated January Update

Active Attacks Target Critical Vulnerability in Legacy D-Link DSL Routers

Never miss stories about

Vulnerability Management