Three severe vulnerabilities (including CVE-2025-31133) have been disclosed in `runc`, the low-level container runtime underpinning Docker and Kubernetes. These flaws […]
Critical Container Escape Flaws in ‘runc’ Threaten Docker & Kubernetes Read More »
QNAP has urgently released firmware updates to fix seven critical zero-day vulnerabilities in its NAS operating systems. These flaws were
Seven Critical QNAP Zero-Days Patched After Pwn2Own Exploitation Read More »
The Clop ransomware gang has returned with a new mass-exploitation campaign, this time targeting a zero-day vulnerability (CVE-2025-7788) in “SafeMove,”
New “Clop” Ransomware Zero-Day Hits Secure File Transfer Tool “SafeMove” Read More »
A joint advisory from CISA, NSA, and FBI confirms that the China-state-sponsored group “Volt Typhoon” has successfully infiltrated multiple US
Volt Typhoon Hackers Found Lurking in US Power Grids for 6 Months Read More »
Okta has released emergency patches for a critical vulnerability (CVE-2025-10099) affecting its standard authentication API. The flaw allows an attacker
Critical Authentication Bypass in Okta Identity Platform (CVE-2025-10099) Read More »
Researchers have identified “HiveMind,” a novel botnet comprised of millions of compromised IoT devices (cameras, routers). Unlike traditional DDoS botnets,
AI Botnet “HiveMind” Discovered Using IoT Devices for Password Cracking Read More »
The Clop ransomware gang has returned with a new mass-exploitation campaign, this time targeting a zero-day vulnerability (CVE-2025-7788) in “SafeMove,”
New “Clop” Ransomware Zero-Day Hits Secure File Transfer Tool “SafeMove” Read More »
Researchers have identified “HiveMind,” a novel botnet comprised of millions of compromised IoT devices (cameras, routers). Unlike traditional DDoS botnets,
AI Botnet “HiveMind” Discovered Using IoT Devices for Password Cracking Read More »
A joint advisory from CISA, NSA, and FBI confirms that the China-state-sponsored group “Volt Typhoon” has successfully infiltrated multiple US
Volt Typhoon Hackers Found Lurking in US Power Grids for 6 Months Read More »
Okta has released emergency patches for a critical vulnerability (CVE-2025-10099) affecting its standard authentication API. The flaw allows an attacker
Critical Authentication Bypass in Okta Identity Platform (CVE-2025-10099) Read More »
