The latest stable release of Google Chrome addresses a massive volume of security defects, including multiple critical-severity flaws that allow […]
Google Chrome 148 patches 127 vulnerabilities including three critical zero-days Read More »
A critical buffer overflow vulnerability in the User-ID Authentication Portal of PAN-OS is being actively exploited by a likely state-sponsored
Critical Palo Alto Networks PAN-OS zero-day RCE exploited in the wild Read More »
A dozen critical security vulnerabilities have been disclosed in a popular Node.js library used for executing untrusted code in a
Critical vm2 Node.js library vulnerabilities enable sandbox escape and RCE Read More »
The Iranian state-sponsored threat actor known as MuddyWater is utilizing social engineering via corporate collaboration platforms to initiate espionage operations
Iranian MuddyWater group abuses Microsoft Teams for false-flag ransomware attacks Read More »
Official installers for a widely used disk imaging software have been found to contain malicious code injected by sophisticated threat
Official Daemon Tools installers trojanized in sophisticated supply chain attack Read More »
A critical zero-click vulnerability in the Android operating system allows unauthenticated remote attackers in close proximity or on the same
Critical Android Zero-Click RCE CVE-2026-0073 impacts core ADB interface Read More »
A critical security vulnerability in the Weaver ❨Fanwei❩ E-cology collaboration platform is currently being exploited in the wild. This enterprise-grade
Weaver E-cology collaboration platform under active zero-day exploitation Read More »
A large-scale credential theft operation has been identified targeting tens of thousands of users across global organizations. This campaign is
Microsoft discloses mass token-theft campaign targeting 35,000 users globally Read More »
A critical vulnerability in the Linux Kernel involving incorrect resource transfer between spheres has been added to the federal list
CISA adds Linux Kernel resource transfer flaw CVE-2026-31431 to KEV catalog Read More »
A sophisticated fraud network is utilizing the Mini App feature within Telegram to impersonate high-value brands and deliver Android malware.
Telegram FEMITBOT operation impersonates Apple and NVIDIA to deliver Android malware Read More »
