MongoDB has warned IT admins to immediately patch a high-severity vulnerability that can be exploited in remote code ...

A new report out today from artificial intelligence security startup Cyata Security Ltd. details a critical remote code ...

Because it was under attack before a patch was made available by WatchGuard on December 18, this makes CVE-2025-14733 a bona ...

WatchGuard warns that the critical Firebox vulnerability CVE-2025-14733 has been exploited in attacks for remote code ...

WatchGuard is in emergency patch mode after confirming that a critical remote code execution flaw in its Firebox firewalls is ...

An unpatched zero-day vulnerability in Gogs, a popular self-hosted Git service, has enabled attackers to gain remote code execution on Internet-facing instances and compromise hundreds of servers.

Rapidly change your password, the Microsoft security team urges as Shai-Hulud Dune Worm cloud attacks continue.

In early December 2025, the React core team disclosed two new vulnerabilities affecting React Server Components (RSC). These issues – Denial-of-Service and Source Code Exposure were found by security ...

Two Apple zero-day vulnerabilities discovered this month have overlap with another mysterious zero-day flaw Google patched ...

“Users should urgently update all their impacted Apple devices,” James Maude from BeyondTrust warns. “Even though this only ...

The technique, dubbed Lies-in-the-Loop (LITL), exploits the trust users place in confirmation prompts, turning a safeguard ...