A prominent international security competition has concluded with offensive researchers demonstrating numerous previously unknown vulnerabilities across enterprise operating systems, web […]
A critical security flaw impacting a core request-routing component of both commercial and open-source web servers has been disclosed after
Critical 18-Year-Old NGINX rewrite module flaw enables unauthenticated heap overflow Read More »
An active exploitation campaign targeting on-premises corporate mail systems has prompted federal authorities to include a persistent scripting vulnerability in
CISA adds Microsoft Exchange Server OWA cross-site scripting flaw to KEV catalog Read More »
A critical authentication bypass vulnerability in software-defined network architecture is under active zero-day exploitation, allowing remote unauthenticated threat groups to
Cisco warns of zero-day exploitation targeting Catalyst SD-WAN peering authentication Read More »
A cross-site scripting vulnerability present within legacy corporate mail services has been officially added to the federal inventory of actively
CISA adds on-premises Microsoft Exchange Server spoofing vulnerability to KEV catalog Read More »
A prominent artificial intelligence research organization has initiated an emergency rotation of code-signing mechanisms after discovering an active developer environment
OpenAI forces certificate rotation following developer compromise via TanStack attack Read More »
A critical authentication bypass vulnerability in software-defined networking controllers has been added to the federal list of known exploited threats
CISA mandates immediate remediation for Cisco Catalyst SD-WAN admin bypass Read More »
A critical SQL injection vulnerability in a popular AI orchestration gateway is being weaponized to steal sensitive provider credentials. This
LiteLLM AI gateway under active SQL injection attack to harvest master API keys Read More »
A maximum-severity vulnerability in a leading DevOps platform has been proactively remediated in cloud environments, but remains a critical action
Microsoft addresses max-severity CVSS 10.0 information disclosure in Azure DevOps Read More »
A sophisticated global espionage operation has been identified utilizing legitimate cloud productivity tools to disguise malicious command and control traffic.
Voldemort malware campaign utilizes Google Sheets for stealthy C2 communication Read More »
